Behavioral task
behavioral1
Sample
41c9dc90fdb3433cb9b4072201f3dc20_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
41c9dc90fdb3433cb9b4072201f3dc20_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
41c9dc90fdb3433cb9b4072201f3dc20_JaffaCakes118
-
Size
483KB
-
MD5
41c9dc90fdb3433cb9b4072201f3dc20
-
SHA1
0df917081bed870e45acb8b0f91d810b12b80bb3
-
SHA256
28a44369b6e51d4234a01974242c548eb42e6fe8c3dca41e731131c1aed0ebcf
-
SHA512
7813ab03b66e6c7b503dd8fde9aaf9745f7ccdcc748fb52329e3afff404205c0ff6f00e515bb5876d660eed679f81222d64fbacc44907728d891cdc9da1dbb78
-
SSDEEP
12288:/p2PDECwzwP2fm9JnORegoJJXy44m0ulpHDnCmJCRA:/sDECwk6iyO7Xy4/drCml
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41c9dc90fdb3433cb9b4072201f3dc20_JaffaCakes118
Files
-
41c9dc90fdb3433cb9b4072201f3dc20_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE