Behavioral task
behavioral1
Sample
3442248cf4e5b6d4df346916e32c2fac_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3442248cf4e5b6d4df346916e32c2fac_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3442248cf4e5b6d4df346916e32c2fac_JaffaCakes118
-
Size
366KB
-
MD5
3442248cf4e5b6d4df346916e32c2fac
-
SHA1
c3bdabb4caa418c2690005cc62b4540753129c6c
-
SHA256
47a55d631e86da56495a7c59e1ac72c5b04dcc2b408b0a5b6bdf19e6ed546fcc
-
SHA512
1aea9b9ea3e7d757abd9888f4ea6f335048f92f28fb2961f93074180c5c9e92c3ea76d67dea52e9c61672f9c67859e065c22a9f97a961693d84e438a0da521e7
-
SSDEEP
6144:JXj5G9uTAbQBBqHaTuEeTFaAkMoJG/e3JJXlBuUBX4HOG+VrCXcWbcfzTlx:BjwMAcBBJaEe538QqnXlixXcWb+L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3442248cf4e5b6d4df346916e32c2fac_JaffaCakes118
Files
-
3442248cf4e5b6d4df346916e32c2fac_JaffaCakes118.exe windows:4 windows x86 arch:x86
eee9062b8cbe1efb89c250150605b1a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
FatalExit
Sections
UPX0 Size: - Virtual size: 528KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc0 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccp3p Size: 1KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE