Behavioral task
behavioral1
Sample
3a02857cd878ba3773c48d021d4c54d5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3a02857cd878ba3773c48d021d4c54d5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a02857cd878ba3773c48d021d4c54d5_JaffaCakes118
-
Size
26KB
-
MD5
3a02857cd878ba3773c48d021d4c54d5
-
SHA1
4b4eea8ea440e68234f6195fe5f0479c71e3139c
-
SHA256
6a8bc6017d2785ffb7b467509e9b3ee6f97c1af713e5562264c4d130df16f055
-
SHA512
affce64dfe9b427e6b5029ccab0eee6e19978ec86805af314dbc84ed257d1d43a7b6c23e23aec949be5e41c40ec234b0aab31ba90966b7e0e5e7ba735479163f
-
SSDEEP
384:xyY8lFdzCTf+6e2RBTw9JJO1cLL54mleJEJcYMGlmj2A0Y5:xyY8xeFWTk1cx4nJEKYMGC0U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a02857cd878ba3773c48d021d4c54d5_JaffaCakes118
Files
-
3a02857cd878ba3773c48d021d4c54d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE