Behavioral task
behavioral1
Sample
3a96adbda6cc3eaad7f005af5153f7c3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3a96adbda6cc3eaad7f005af5153f7c3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a96adbda6cc3eaad7f005af5153f7c3_JaffaCakes118
-
Size
1.2MB
-
MD5
3a96adbda6cc3eaad7f005af5153f7c3
-
SHA1
c3a0ca32a03d80ce6ee39fe3bb19bb1f8a7aeea5
-
SHA256
5ae379529851e224338ec9643adcb0b9dda1f2636dcade76cd50a9463fae0fd4
-
SHA512
cb2bdfd403f20371dd788a4144c6ba4d4ddffb840d0d172eb3c31cf9657d397dc0f037afc6b5a51754611747dbf669ab6e371655e519a719973a3724afe4c17f
-
SSDEEP
24576:lcLQlAtgCHCHyF4LK4l+DqTHD/hUcJt2CgLbWg7ODDSoU2t30l0thW1rQ7U5TRXV:9h37U5B1+dZv3gMnMS9/e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a96adbda6cc3eaad7f005af5153f7c3_JaffaCakes118
Files
-
3a96adbda6cc3eaad7f005af5153f7c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 915KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE