Behavioral task
behavioral1
Sample
041d342e6fcecd532e1f40224f9d2f0b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
041d342e6fcecd532e1f40224f9d2f0b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
041d342e6fcecd532e1f40224f9d2f0b_JaffaCakes118
-
Size
154KB
-
MD5
041d342e6fcecd532e1f40224f9d2f0b
-
SHA1
8d4912519ee2b92b0484abd65ebd5e77fe84befd
-
SHA256
bbf493459e4f3166a03d8d6804f8147bff971121cfd1f69fa06fa96e2d6476d1
-
SHA512
cc89df5f4ac9ef36bc1ae29c57c1225fd7b96137a4e686c0751b330f4c31f6e4307a69506052bf3625c30e47080d62c2344a015020df80b34e508171eb7a57e4
-
SSDEEP
3072:tLMfjlGZGLpG6k0J8NEXzwRqNNan+kIKcAxDWEeAD5TyBFhM18qTz4PXz:efR440WXUqnNLwyBFgfW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 041d342e6fcecd532e1f40224f9d2f0b_JaffaCakes118
Files
-
041d342e6fcecd532e1f40224f9d2f0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 356KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE