Behavioral task
behavioral1
Sample
941b983210d6702f48af9feafe00e4a8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
941b983210d6702f48af9feafe00e4a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
941b983210d6702f48af9feafe00e4a8_JaffaCakes118
-
Size
127KB
-
MD5
941b983210d6702f48af9feafe00e4a8
-
SHA1
390e46ad66df778eeb36e3260b5a3edefa822e64
-
SHA256
68548b79f4255c186fa450751d537827daec622a298ba739808a52c527e7617f
-
SHA512
f1214a5d1b41a93fd0e4fbcb90c24a9e7ec21cc7beed65fce1c8ed1b512109d2908ffd37d0e440f936bcbb9f79643a1222ef22a9675c67d2c4309e869b52579a
-
SSDEEP
3072:yvf4LGz5LscWAzQglLROtSnTO6itWMTlJuN8U:nLAlWA3iteORk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 941b983210d6702f48af9feafe00e4a8_JaffaCakes118
Files
-
941b983210d6702f48af9feafe00e4a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
.ADDE326 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA