Behavioral task
behavioral1
Sample
3ab9b236281c7e775b6d52401bd23460_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ab9b236281c7e775b6d52401bd23460_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ab9b236281c7e775b6d52401bd23460_JaffaCakes118
-
Size
221KB
-
MD5
3ab9b236281c7e775b6d52401bd23460
-
SHA1
abf8a11baf39b3eeeda2450b289bad2a4bae0ed9
-
SHA256
26a85af4872b27f9221ff68093dcd16585570d35b99f2145ab48a8076307be0d
-
SHA512
9e3e5ef2da75d601000073b153ed540d57e45f26a43a00344bf55ba796cd66a5f755b3e242fc9f11356e581df29246e01f665ac30d3392652eb30e469786c21e
-
SSDEEP
6144:mi4ctC5GMvcVqHdhfYM9q+jClGwj9rTGMv4m4:mi4dYVq9hfYM9q+U+MQm4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ab9b236281c7e775b6d52401bd23460_JaffaCakes118
Files
-
3ab9b236281c7e775b6d52401bd23460_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1020KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 320KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 339KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE