Behavioral task
behavioral1
Sample
3e0598b5378bb333c08259791570c93b_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
3e0598b5378bb333c08259791570c93b_JaffaCakes118
-
Size
4.3MB
-
MD5
3e0598b5378bb333c08259791570c93b
-
SHA1
3b9c4873d6a784a7f7bf0ec906fad3ea83860258
-
SHA256
5684675ac9c76c25026d344787e1a4bca0de221ef578fb890aefa9ce86369cdd
-
SHA512
aae2e58310476c22d7ff476c0f6a5c3721405fcc6e0fe6dd2bc8137a4a9af13b933bb8fe76820225723f7367a80e3137649e8b1442992c3acfa47fdb5e13224c
-
SSDEEP
98304:FwKrrDbGf0na94BxaWeVM4k83vU7TsN48DSFGOEhp/QZlYyJAVB:FlvD/a9QYY88nsN4qSFA/Q3vaB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e0598b5378bb333c08259791570c93b_JaffaCakes118
Files
-
3e0598b5378bb333c08259791570c93b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 8.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 501KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE