Behavioral task
behavioral1
Sample
941c6c4a7219740675d7fc93493994a9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
941c6c4a7219740675d7fc93493994a9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
941c6c4a7219740675d7fc93493994a9_JaffaCakes118
-
Size
85KB
-
MD5
941c6c4a7219740675d7fc93493994a9
-
SHA1
8e7e07f5a78824e213ac674ba63ccb3642aedce8
-
SHA256
6ca0a6791c64845e7357f99379303a7d7e9749e80b8b2a179438dffef9064a3d
-
SHA512
b0ffd1f8b7525e176251c76280d5da5a97dca3520522c0a91d4dff9163cdd1241d25021bfb7c34dbac990909dbb7be862a7a5324fa61efc20bdca66fccd8bb67
-
SSDEEP
768:vSVqPaQ/GaHwIgRXNFcIn5R2WhKB9F+XFHkJaS4oxWLvxnzUA8L2pu/4W+B+cahB:aVqCQ/Ga0SB+FToxWLvxJxpM+/pMxcW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 941c6c4a7219740675d7fc93493994a9_JaffaCakes118
Files
-
941c6c4a7219740675d7fc93493994a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE