Behavioral task
behavioral1
Sample
3a3a2d757cfc5a56a38ed6ff4803b7b8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a3a2d757cfc5a56a38ed6ff4803b7b8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a3a2d757cfc5a56a38ed6ff4803b7b8_JaffaCakes118
-
Size
3KB
-
MD5
3a3a2d757cfc5a56a38ed6ff4803b7b8
-
SHA1
b398a131baba8b9b84aab61f4b8211d562c0af2b
-
SHA256
4251199751a68d5aa23b3932af2857c3a8059ea0a4e72349d99add1eb44833b7
-
SHA512
9953b78b5f29f632afcc2e96b07a484dd1ca627102f8ce77e9c3555fc9b0226107664b1b1487cac597e3c209aa9f1eacef141c5301661dac372cee278ce468e5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a3a2d757cfc5a56a38ed6ff4803b7b8_JaffaCakes118
Files
-
3a3a2d757cfc5a56a38ed6ff4803b7b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE