Behavioral task
behavioral1
Sample
3a7b2e941f0ff549d415b3680f16b370_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a7b2e941f0ff549d415b3680f16b370_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a7b2e941f0ff549d415b3680f16b370_JaffaCakes118
-
Size
463KB
-
MD5
3a7b2e941f0ff549d415b3680f16b370
-
SHA1
18de5e86f2ab8ceb5bae7fa60770fe293ed64d56
-
SHA256
b347c68002417c50de7869b3f3cf7eddc582901e87d6aa5490b8850e65fe50c0
-
SHA512
c7ca0a78bc9ec8735559832fdf1082a091d9c923958da6263e350d7e2dcc938f6d23d4d96b2d64484fe28a48ac7aad87afd12ad117081f1f2d53f1b229e71168
-
SSDEEP
6144:3B8sOtOagYKKKgfcufObeZ7jHrMSV7Hrz45FHjg9mBKlsybC9N0MJyd:3B8IagYnKgfHQKYSVTYjg9mBIsybk0MS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a7b2e941f0ff549d415b3680f16b370_JaffaCakes118
Files
-
3a7b2e941f0ff549d415b3680f16b370_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE