Behavioral task
behavioral1
Sample
41207944c498ab7bf1c76747284fa6b8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41207944c498ab7bf1c76747284fa6b8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41207944c498ab7bf1c76747284fa6b8_JaffaCakes118
-
Size
58KB
-
MD5
41207944c498ab7bf1c76747284fa6b8
-
SHA1
3c9259ce4b0087d4abc61e903b15f46c729ce4b5
-
SHA256
7d4ca1a13519e692647d3b36147df88c51be8d78b78d6006029aab8dc7747e76
-
SHA512
8546f459be6e57b48f01ea7e8a529d6cb2e58926d3709754fd9c3c7b48f5959ab56a50d3a5215007b676264d511e02fdad22ae36cbbe1b06d0dae41a3eb2147f
-
SSDEEP
1536:dny+XlIJ7RaNoJESbhn413NCCH45LTmnPhjqFzqjOpy7:dy+s7RaeNn413x45LTmnZ+qjX7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41207944c498ab7bf1c76747284fa6b8_JaffaCakes118
Files
-
41207944c498ab7bf1c76747284fa6b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE