Behavioral task
behavioral1
Sample
841832d6b1cc0cc94a73519accac26c7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
841832d6b1cc0cc94a73519accac26c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
841832d6b1cc0cc94a73519accac26c7_JaffaCakes118
-
Size
8KB
-
MD5
841832d6b1cc0cc94a73519accac26c7
-
SHA1
1a9cd15244cb692a0915b5587ae7944d69d1d205
-
SHA256
51d72d534fc60f97bf4a1757e1865aa1dcb2e310bef9ceda268851853ce13ae4
-
SHA512
1a299758e2ad77ddc548af870d8c290b39838d56e2ad8477a7fd357450155053e71045def363facbdb407acee603dd9ade65d16d93048c1fab589c211930a5fa
-
SSDEEP
192:8LiVBTYNdLEj0O2YdToZKXBQSCAdl8V4QVSSfR4i1I:QiVBqLEjdpjf8t82tI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 841832d6b1cc0cc94a73519accac26c7_JaffaCakes118
Files
-
841832d6b1cc0cc94a73519accac26c7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 568KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 265KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE