Behavioral task
behavioral1
Sample
541bec4cd927307ca3114a14d6130a8f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
541bec4cd927307ca3114a14d6130a8f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
541bec4cd927307ca3114a14d6130a8f_JaffaCakes118
-
Size
137KB
-
MD5
541bec4cd927307ca3114a14d6130a8f
-
SHA1
c2d3293abfebcac9c7cf209732ae1a479b402199
-
SHA256
bdfd896ad447c2c48ee9cfb72a43b3597faf66ee7af6154af7843da4060446d6
-
SHA512
1d20552aa908930f5ed5b6b7587da9b70f88a640704be03ce154e63659eb618c1ab377a5954348a1ac23526a2e84e263b36b46171c8e7c880e370dc67dbfe6d8
-
SSDEEP
3072:z/OsoHBiUFoa2sXl8+R9RLky3OM3qNS53Hm1X:T1csULZl8+9Lk2L35Zq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 541bec4cd927307ca3114a14d6130a8f_JaffaCakes118
Files
-
541bec4cd927307ca3114a14d6130a8f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 283KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE