Behavioral task
behavioral1
Sample
3954ee948de0b80bd73624da169eb142_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3954ee948de0b80bd73624da169eb142_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3954ee948de0b80bd73624da169eb142_JaffaCakes118
-
Size
451KB
-
MD5
3954ee948de0b80bd73624da169eb142
-
SHA1
032a7a8286815621502cbf9d267180fcc882e03f
-
SHA256
28ba2c4f29804085fb36a966a2a3e28429b43e68985b2119b99e22d2f5e2ce1f
-
SHA512
22a358bff18092474598d0f474893915ca8f86df68bcea73c95a6092fe44caaa9b795e9af503127ac0261c14a28adb8236651a96051c694e693e3266b353eeb0
-
SSDEEP
3072:YfhHTL3/ZhdAAKgLO0l7w0ZJA/5bdjVIhJqR0b37Hw:4VhhdAl0CyKxbdjVI+07Hw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3954ee948de0b80bd73624da169eb142_JaffaCakes118
Files
-
3954ee948de0b80bd73624da169eb142_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE