Behavioral task
behavioral1
Sample
3b0424ddf932df41697b78aa481b5631_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
3b0424ddf932df41697b78aa481b5631_JaffaCakes118
-
Size
382KB
-
MD5
3b0424ddf932df41697b78aa481b5631
-
SHA1
56fb03c2e7c9798f97ae5272511a30ccc527f31c
-
SHA256
7382627e827e864f2bec1cb45f9a120c7beb399489ee23e51659017864c956c1
-
SHA512
f394bd93f46b1f4ef28f2a5fc03fee56d5a7aa1e12d611ad1db30d73db96df8580251ad030e77a8a5223c5a0ade9e410fa5674eeee09d74fcc1c0f74e8efb5f2
-
SSDEEP
6144:lxBEOOBKDyBiLwHm/BmzKwIaWNgxOjVl2rQ+V5S4q5hIH7Q1JqGxABrFFC5erWYq:lwOOBhi8H8czWGOyQ+Ti5l1JqGx4rFMB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b0424ddf932df41697b78aa481b5631_JaffaCakes118
Files
-
3b0424ddf932df41697b78aa481b5631_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 284KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 381KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE