Behavioral task
behavioral1
Sample
3baddf97f09cdfcf0219ce2c4e54dbf5_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
3baddf97f09cdfcf0219ce2c4e54dbf5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
3baddf97f09cdfcf0219ce2c4e54dbf5_JaffaCakes118
-
Size
93KB
-
MD5
3baddf97f09cdfcf0219ce2c4e54dbf5
-
SHA1
4c22e32c0cfe9ffd7b990f0953b659c80eb9ed81
-
SHA256
d332d32bc2e6dc866a7e0d90448ab9fc45fab029b48033c9efa4d37ffb3ce4df
-
SHA512
cb07fc5ba63dcd4037bbcc60170873fc05c7e941f913d26b1b32468fbb98caa4913a051f4fcf8e1c1df364f095d49b3e04711e38ea906ab90e90b33818c83b2a
-
SSDEEP
1536:Bfjgk72Lnj+UjW7fAGn33pTbKZ5D76I9wl3Rp5wb8Mem58lfIUMSqd7gs2UPiZ:FsnaUiA2HMZ5D2j3r5wb8ML9BSqxgs2R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3baddf97f09cdfcf0219ce2c4e54dbf5_JaffaCakes118
Files
-
3baddf97f09cdfcf0219ce2c4e54dbf5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE