Behavioral task
behavioral1
Sample
3e5f14b84334022a85d003ad309ea582_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3e5f14b84334022a85d003ad309ea582_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
3e5f14b84334022a85d003ad309ea582_JaffaCakes118
-
Size
183KB
-
MD5
3e5f14b84334022a85d003ad309ea582
-
SHA1
7c5c90b2fabdd2845b78b0192ec373ff73f14c4f
-
SHA256
314db1879cb724f3a36df4a70c1c42d2a9ae289da2dffac1b83e135edef5b67a
-
SHA512
26db03de097e5fb493296013e58db6ffddece032bfa05ebb27827ffb6540ff8eb1cf4f74c29297f77d19076283671959481e799ebbf69ad282fae4a005a2a4d7
-
SSDEEP
3072:yZWPBQO8KtcOOqQT1kfbm9yqRIS1IABcIlI/O2vQioFKNlZViGJxEFR:cWPBQO8K6jqg1y4RNbBHSOiQioFKN9Hy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e5f14b84334022a85d003ad309ea582_JaffaCakes118
Files
-
3e5f14b84334022a85d003ad309ea582_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE