Behavioral task
behavioral1
Sample
3568f86f92bfe4fd86696e5f980948c9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3568f86f92bfe4fd86696e5f980948c9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3568f86f92bfe4fd86696e5f980948c9_JaffaCakes118
-
Size
908KB
-
MD5
3568f86f92bfe4fd86696e5f980948c9
-
SHA1
fe1b1e3753f3c28bfd25523ac3cdce07710b29e4
-
SHA256
c01cd37f1d3ecfb785302f68dbc21d19a0e670b5a4eca00b87292619bcb223bb
-
SHA512
7716417252d6387bb512d916b94e4082a179723a43445263928b0e91cb020a2adc926afc332d2dc434cf19a27a467859416138d5c1a00eea9805fbb911f75138
-
SSDEEP
12288:6arvA2LwSGCgdb0W6CNY5UacXFLUmDHLib6I7J:6UA2LwFiWpNqUacXFLZDWbB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3568f86f92bfe4fd86696e5f980948c9_JaffaCakes118
Files
-
3568f86f92bfe4fd86696e5f980948c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 572KB - Virtual size: 572KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE