Behavioral task
behavioral1
Sample
3385ed5b102a05cad7386e21027c16d8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3385ed5b102a05cad7386e21027c16d8_JaffaCakes118
-
Size
784KB
-
MD5
3385ed5b102a05cad7386e21027c16d8
-
SHA1
f9a8499eb31a72ffc57662ab7211e848c0a37b6c
-
SHA256
5b42e396d38596960a54e40b7d9bb2f28ef87b18517baeef1a541959a7ee98db
-
SHA512
77a4a40e17639ba29edd8bb4e00345ab6c82cdc3f073b25d2d49fe87a33203ebaf4c3b7084e0a22855d21096cf2c1b0c03f2ac484346e66576e0089694a1569c
-
SSDEEP
24576:uNSYuw0v073uVC7Posr+2oUw9JPwe/CN:uNL13ukPnr+2mJPZ/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3385ed5b102a05cad7386e21027c16d8_JaffaCakes118
Files
-
3385ed5b102a05cad7386e21027c16d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE