Behavioral task
behavioral1
Sample
41c593f156a6ef4b08ba1c278ec3456a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
41c593f156a6ef4b08ba1c278ec3456a_JaffaCakes118
-
Size
102KB
-
MD5
41c593f156a6ef4b08ba1c278ec3456a
-
SHA1
706c2f734569b0c61951a9a04eb214943f513259
-
SHA256
5e66080ce2e7483dc8172419b13be7d0613e13683c91b845ee5299c1d192cc3b
-
SHA512
42d2b97f2e97421986e47c7cf880da934051f512595ca9f17929657784bb8e045c18c2a6269339000e4052c4343e92891fc3ed956623bc94f0f533ae184cc9dd
-
SSDEEP
1536:thl89eHH4owp7CZbbTTsq54BjQ1YwTgsZ2Mh+ONsrxDDGy+LdDfnn:TlAe4Np7S54V8rgsl+ONsr5SDfnn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41c593f156a6ef4b08ba1c278ec3456a_JaffaCakes118
Files
-
41c593f156a6ef4b08ba1c278ec3456a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ