Behavioral task
behavioral1
Sample
3b16ed07aa96ee6499ce9acb135334f5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3b16ed07aa96ee6499ce9acb135334f5_JaffaCakes118
-
Size
784KB
-
MD5
3b16ed07aa96ee6499ce9acb135334f5
-
SHA1
375d32b41e48917106188e5082d0822c8d78737b
-
SHA256
a15c8d3398f4ce9f2ebc3a8746efc468969f00e9216158826177e1bbe5ebabd1
-
SHA512
106ed89527e774e101764524fe2ab7029f599f40ff7474f728e3bfb5689552a1c1d4303ce39009d496f8706c3bf8117fae0f4e8fc93610bc7edfdf4b7ac2176f
-
SSDEEP
24576:t9KTybrezULh79EbXETTlDfUDu/B24d/IoSQheLt4KF:tcyPee79EbXETTlCIk4lIwc4o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b16ed07aa96ee6499ce9acb135334f5_JaffaCakes118
Files
-
3b16ed07aa96ee6499ce9acb135334f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE