Behavioral task
behavioral1
Sample
41ab88a122c721a00f6f9e8d58185e3f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41ab88a122c721a00f6f9e8d58185e3f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41ab88a122c721a00f6f9e8d58185e3f_JaffaCakes118
-
Size
133KB
-
MD5
41ab88a122c721a00f6f9e8d58185e3f
-
SHA1
a78c2df834ba084915ed021af0db41db6a8d5b8e
-
SHA256
ea725a6fcefd40ff46e5dd7a51c1cde7260afa55ef73a126210bfb08b46a8081
-
SHA512
c9661b15378f0e776f9b3f595d90ece7a538108cb45cd1d04c908af90c8dd6b887b61324be1db76e441c2f2c204659400d32a1ecce7eb9e561af805adf3ffc22
-
SSDEEP
3072:qy7qV0kUJxZLKvDs4i/bo15mZg3GFhnXnch9T3A6QUcou57tt:qIqVuFmvubo153GPnshd3AfNoyZt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41ab88a122c721a00f6f9e8d58185e3f_JaffaCakes118
Files
-
41ab88a122c721a00f6f9e8d58185e3f_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE