Behavioral task
behavioral1
Sample
741451c1172a773cd5179b7078a56f50_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
741451c1172a773cd5179b7078a56f50_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
741451c1172a773cd5179b7078a56f50_JaffaCakes118
-
Size
75KB
-
MD5
741451c1172a773cd5179b7078a56f50
-
SHA1
a38085678501959e1801a67bfad74ee6701844cd
-
SHA256
62999de0d2e9841b7322f448b7d8b9813783cd49290f0643174f55461a26520b
-
SHA512
5d9d1655900443e3333c0c19b318c2bb94eabcca4d74f9f1d79153b35573ff46141f93c387d509e44fc03c34f94fb6f5f348767e2ee6578301156fc98bca290a
-
SSDEEP
1536:aJ0UDT5hHRRPgKTTVEV8B9bDsKChr+LKvO6Dn1YUH92nouy80MJ:aJ0UcKnqV8B9bDsKCYaOG1YUgout0MJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 741451c1172a773cd5179b7078a56f50_JaffaCakes118
Files
-
741451c1172a773cd5179b7078a56f50_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE