Behavioral task
behavioral1
Sample
3adc4281fb3cf8fe89d237a956b2cd00_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3adc4281fb3cf8fe89d237a956b2cd00_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3adc4281fb3cf8fe89d237a956b2cd00_JaffaCakes118
-
Size
66KB
-
MD5
3adc4281fb3cf8fe89d237a956b2cd00
-
SHA1
d9520b0598e7de8cf656a726064f46224ed5c39b
-
SHA256
2abcfc51508ec6460e43839b3669a8379ff148afdc8fee24eda894f61e846b85
-
SHA512
9ac7cbddd367c5c42af8cdc7a9003071092c3fb4180ec7b6b39029793556db4f0e049e76c83fea29d87cc7bde4f01a6eb1f250250be3040830ae84325d8fc27b
-
SSDEEP
1536:AylxGYpKA+wN9V+dbysEP66Vpt8q+7IaQ4hxcz:AeKA+wnayrt8q+7Iuh2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3adc4281fb3cf8fe89d237a956b2cd00_JaffaCakes118
Files
-
3adc4281fb3cf8fe89d237a956b2cd00_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE