Behavioral task
behavioral1
Sample
41f6cc5e043aadfdeab0b4978542dc32_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
41f6cc5e043aadfdeab0b4978542dc32_JaffaCakes118
-
Size
415KB
-
MD5
41f6cc5e043aadfdeab0b4978542dc32
-
SHA1
030306c5d4deafed1acd116d77536583e9889e96
-
SHA256
f093179ed22641b69bc00f7cd3a69d52e33811549d643020b6c95ff39831502b
-
SHA512
6ad7968f5271b49f0d72ac692a4454b24bb4394147a67cbc459fd567040ea0655c89416b96fea4a8759a666a0717de0bc1cb7327864db0d93bfae95ddb733ecc
-
SSDEEP
12288:P/BGaVjY8U7P9ZiARBvYeu6ItHEgnhi1eNZr9DSxLvgVoSI:PpmEkBruhXiQNnDS9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41f6cc5e043aadfdeab0b4978542dc32_JaffaCakes118
Files
-
41f6cc5e043aadfdeab0b4978542dc32_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 868KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE