Behavioral task
behavioral1
Sample
3aa351387b53449aba8d58f8e7e41e61_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3aa351387b53449aba8d58f8e7e41e61_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3aa351387b53449aba8d58f8e7e41e61_JaffaCakes118
-
Size
496KB
-
MD5
3aa351387b53449aba8d58f8e7e41e61
-
SHA1
bbc04810199e233e0ee02c402e4af0771e89ff9e
-
SHA256
08c612b8bb61157ca05e3082389952286e19174ae0192a9d79b248d50bbcc146
-
SHA512
d42de8651536bda7f0e034a7435d3a9eb254ffa7341b7fc8e7eda886e6962dcc9b6909e9748f9d8ecd3e68b01c8e4a4fdbcca7f7d59c640d51e10e27ade2e119
-
SSDEEP
6144:WkPlSwSmzEnqjDWrzF/zUc7AeY6EJsObtbHxcLXnJELlZfzuNdKr+Q0:UzUgcFswbRoXnS6M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aa351387b53449aba8d58f8e7e41e61_JaffaCakes118
Files
-
3aa351387b53449aba8d58f8e7e41e61_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 210KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE