Behavioral task
behavioral1
Sample
3635ad5fd49cd2fa7cdabdd2dc777f11_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3635ad5fd49cd2fa7cdabdd2dc777f11_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3635ad5fd49cd2fa7cdabdd2dc777f11_JaffaCakes118
-
Size
23KB
-
MD5
3635ad5fd49cd2fa7cdabdd2dc777f11
-
SHA1
7051f081b073943f5a3e3580d7225555c7791863
-
SHA256
c8e25d45e6d1f39d6f1b3b01d2455bc81ef89ab5a276a1b43e56f1e1739b2923
-
SHA512
da85e9800b5ce79390eed2c441d959ada2d59e810694cb69ef23ad216458a3c0ce48b7c636d52a52f0048b11708a3d56524dd4ac28fd573b9fd1b3a0a7cd4e1b
-
SSDEEP
384:+H7/L4NSI2fosYD5qnhgcZNowlmqv6vkryoJ4zxcOiBryVh5bGhubGb8Udwm5bze:+Hz0SzfXYDkn+cjowlmqSM+oJYxopy3v
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3635ad5fd49cd2fa7cdabdd2dc777f11_JaffaCakes118
Files
-
3635ad5fd49cd2fa7cdabdd2dc777f11_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE