Behavioral task
behavioral1
Sample
3166934bc029ee6534d3acab8cdce7d0_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
3166934bc029ee6534d3acab8cdce7d0_JaffaCakes118
-
Size
6.4MB
-
MD5
3166934bc029ee6534d3acab8cdce7d0
-
SHA1
4f1cecf864420d2d5aecd274202a327a6c313df5
-
SHA256
12d399d5c166449801c7036c376a6b9bd5664b6039744770d90631bb7d24d03d
-
SHA512
e00b73eabc89d8330a12fb74c9d73618f8a21c6e7a1a76098484913edc1ba94f9687f72618b8e8967961b70b929a7818596288393ecc83a153327369597a5590
-
SSDEEP
98304:OKI9wafeKFRcTQ1B1/5iqPwB+Iiw/4uMsb69hSjedO1Ol6sSW7fULLz9QcWH7:OK+waG6z1B1pIijs+9hSmOpXWs3z+cu7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3166934bc029ee6534d3acab8cdce7d0_JaffaCakes118
Files
-
3166934bc029ee6534d3acab8cdce7d0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 10.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 507KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE