Behavioral task
behavioral1
Sample
41617250810b8ccf6c5e287a542d11b8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41617250810b8ccf6c5e287a542d11b8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41617250810b8ccf6c5e287a542d11b8_JaffaCakes118
-
Size
146KB
-
MD5
41617250810b8ccf6c5e287a542d11b8
-
SHA1
4e7c3750bd3ab8458468e0181965be844755e017
-
SHA256
e020b70b2151def7a6d779f74bb5aa8ff21a958bfc4cf509451920ac6e042c37
-
SHA512
619840bbc2407236083a385830446272d835805f79fe03ab20dd254eebe490d23c1a54561090894a22512d1ca63d2232f3c0e759308a29fc03de7612d74bbf3b
-
SSDEEP
3072:pFe1BwvTmif8nnaSwu9tIiaul2RJk1qq0aL0qvl1ouvl:pFe2rUnnac9tIkll1q0FN1oEl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41617250810b8ccf6c5e287a542d11b8_JaffaCakes118
Files
-
41617250810b8ccf6c5e287a542d11b8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE