Behavioral task
behavioral1
Sample
3771c29453c3bb483872cb7d1f3ff745_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3771c29453c3bb483872cb7d1f3ff745_JaffaCakes118
-
Size
1.5MB
-
MD5
3771c29453c3bb483872cb7d1f3ff745
-
SHA1
de0e8718c4f91e70bee73845c1e0f98bcb18694d
-
SHA256
f7768358c815578c0d74a59f04ed4d7523a08aa191f266e7b07841d6ffd31a26
-
SHA512
29d882de1287e8845c5f677d1c9a969dfa435d042a61836f19d4b2f80d525bbb28685c4079d4195a97aed0685f5cf5cac12427d54a5e071bc9f73488c9c83057
-
SSDEEP
24576:NfSxDy7JTpW1GdIPRnd3bYG/0XRIlShNODppDzM3tb+8rvuT/ieEt3m5rQ+Uor:NfSxm7sGdIPbUrRIkuppk9S8rvuW1ff
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3771c29453c3bb483872cb7d1f3ff745_JaffaCakes118
Files
-
3771c29453c3bb483872cb7d1f3ff745_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE