Behavioral task
behavioral1
Sample
3a936cdc26c5226dbb9e2059c4734d1f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a936cdc26c5226dbb9e2059c4734d1f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a936cdc26c5226dbb9e2059c4734d1f_JaffaCakes118
-
Size
158KB
-
MD5
3a936cdc26c5226dbb9e2059c4734d1f
-
SHA1
dfa5a51525439f6fc2deb4d93b552c488eb3ec8e
-
SHA256
e47d287cc53f9672a4e2ed29ec777a49d56ff5e4c0c382f5073f878f46ba5a9e
-
SHA512
004fa7a41f17380407091e36ab9bea80824db44fb66100f651e1ae7062671ec49b15ac6d8d92edc079751e604dd5d97847247b3b168750b6c6cc4ec40b257f29
-
SSDEEP
3072:4BV820qjvSfhWJ/JZBkoL7U20T2X/5W5gdKo2Gsoj02TyNvHOQo/WGJUu8h6ProS:C0qTseZBD730T2X/84o12Qo/WGXoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a936cdc26c5226dbb9e2059c4734d1f_JaffaCakes118
Files
-
3a936cdc26c5226dbb9e2059c4734d1f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE