Behavioral task
behavioral1
Sample
3b1efd4ac045167c761167a04599f9e5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b1efd4ac045167c761167a04599f9e5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b1efd4ac045167c761167a04599f9e5_JaffaCakes118
-
Size
13KB
-
MD5
3b1efd4ac045167c761167a04599f9e5
-
SHA1
235a84708830935cdf009d775fa90afcf10fcafd
-
SHA256
509d90fbe44c7e9490af825866a92bcb168809f8c8a1872d7fa73cbff04ba24d
-
SHA512
88dc4377c43a7e6f99bba7633a2955ad595996f3fb558c425bd3829ed7664ae848d43e5eb0ed4bc662f908169c1d2aeaf652fbaf4423c9d8446d0858122a20b6
-
SSDEEP
96:bzlRJn8fcgMmJ3Pi3cYHEX7qMuiT8mYoKZmvXdpfNqkroCEc70hNPMcdGIPN+:VRYcGGH9c54Zmldh820hG2GI1+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b1efd4ac045167c761167a04599f9e5_JaffaCakes118
Files
-
3b1efd4ac045167c761167a04599f9e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
4a5c7016f8a55183eaacea531147a4be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
Sections
UPX0 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE