Behavioral task
behavioral1
Sample
41340de09d5c3d13b8e781061627dd65_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41340de09d5c3d13b8e781061627dd65_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
41340de09d5c3d13b8e781061627dd65_JaffaCakes118
-
Size
137KB
-
MD5
41340de09d5c3d13b8e781061627dd65
-
SHA1
4a4acd1f308c0108f5bf9b3a40e50e3612641bfb
-
SHA256
90aacb86b52221b712ec80791c37e3525c9d15f8e2f4b4380d7d3b42e2747dc0
-
SHA512
52f8cb2cbf0d89f2e6214690fb1aff4351b2a3fc9281d5398524efaac43d94840b9bd622012b2ff7a5c3d180060e208412efd20f91b200658869134764ada5d6
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53WR:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41340de09d5c3d13b8e781061627dd65_JaffaCakes118
Files
-
41340de09d5c3d13b8e781061627dd65_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE