Behavioral task
behavioral1
Sample
41b6a66de62c351e8540698887871c5e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
41b6a66de62c351e8540698887871c5e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
41b6a66de62c351e8540698887871c5e_JaffaCakes118
-
Size
484KB
-
MD5
41b6a66de62c351e8540698887871c5e
-
SHA1
19b49698e9937951d410795372bcb0d5e547da5f
-
SHA256
ffbc9b83f5d32625da1f0327c2c10172823a66bbe467960e373d8ee874caa290
-
SHA512
b0cef3f16311f5d0901a878779d4c03b68b0caeb0b45596ddd99a96e66ce5af7687897bd57ff9f58755e97d05c49b1fca31c97e592761ed17fbe7e39f201199c
-
SSDEEP
6144:eyamHJnc8otIBSDDXe/WHZFqEIGJlYFy9ntp6QB4Zz1Jau0UZJ:ehUncBYQu/qcGJlYFy9ntpCZyuHZJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41b6a66de62c351e8540698887871c5e_JaffaCakes118
Files
-
41b6a66de62c351e8540698887871c5e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE