Behavioral task
behavioral1
Sample
d41a31a3bfbbb5790aa4c0a5540c8048_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d41a31a3bfbbb5790aa4c0a5540c8048_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d41a31a3bfbbb5790aa4c0a5540c8048_JaffaCakes118
-
Size
460KB
-
MD5
d41a31a3bfbbb5790aa4c0a5540c8048
-
SHA1
f2dd37a7e60dcb9e0b65d65f1ba7fbdec29b9272
-
SHA256
52506dadbd8b2c61007f49460a0ec494bab50d86ba276f726c0b958b98fc6547
-
SHA512
9cafbc350fc1b6e99fd13b939a2f0bc6948592e1af9a9c5209ce4259ce53ec7277a4f7255bed460939db19c824abf4c51ee9573f41ca83ad7d053a4abd001498
-
SSDEEP
6144:cPy2bbpM+16q6HQoGBXVNYbQHMF3oU68P6WcOLwYmkP/4WW4aGj5tXBhsZ:PmS+1yHYRVNYPE8P6bOLPAx49jTXUZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d41a31a3bfbbb5790aa4c0a5540c8048_JaffaCakes118
Files
-
d41a31a3bfbbb5790aa4c0a5540c8048_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 180KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE