Behavioral task
behavioral1
Sample
3535f3481860cd4ddc0560e3a65a1006_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3535f3481860cd4ddc0560e3a65a1006_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3535f3481860cd4ddc0560e3a65a1006_JaffaCakes118
-
Size
11KB
-
MD5
3535f3481860cd4ddc0560e3a65a1006
-
SHA1
f4750e1b50067c1d1615ef9eeb7f2e51a7199bb9
-
SHA256
c70afee2ea01afb2a5f3ae650e5274abce3bf01796c4d640cef8b9ef406b9f22
-
SHA512
bbf0d5de3a5f4def981fe1aa259ffe18158e05e37a0e1e60cf3a63dc77c1ee954fd583daa551aa5d61f04168724dfc8dff18181d30108575ddf1bafcdea55520
-
SSDEEP
192:uk47lL356IuketmnnaV3bj5lTu9zRsvJ0JsLOPTo753I/ssF+b:E5XKmnniLPTORfJsL4u53I/Mb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3535f3481860cd4ddc0560e3a65a1006_JaffaCakes118
Files
-
3535f3481860cd4ddc0560e3a65a1006_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE