Behavioral task
behavioral1
Sample
3956d3507c311e6674bfa88be2a1d661_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3956d3507c311e6674bfa88be2a1d661_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3956d3507c311e6674bfa88be2a1d661_JaffaCakes118
-
Size
799KB
-
MD5
3956d3507c311e6674bfa88be2a1d661
-
SHA1
132e6eed9bf7ed02e1bebffd5c09d336014a0d02
-
SHA256
787844c7f20ab2e834eb57db3d330c872c567760a1759744b64e9a02f11d916d
-
SHA512
bbe699aeebf863c77f2f8cf65fe78264186f77af9a0b7af86201ceb3010a3d27c9c5cc7a713839e043de87300a54bab6e9ffd641471cfcaa245829ec1f6e111c
-
SSDEEP
12288:gd9GCryrAjOPMqMFrq2UwzzH2osOKEJWwmKdrUKvsgyxKJAX2Bw:sGCuAqPM/+nKH1VKSWwmKdowsNxmK2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3956d3507c311e6674bfa88be2a1d661_JaffaCakes118
Files
-
3956d3507c311e6674bfa88be2a1d661_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 792KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE