Behavioral task
behavioral1
Sample
3f17fe39c3750cf36e00d02ed92d049e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f17fe39c3750cf36e00d02ed92d049e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3f17fe39c3750cf36e00d02ed92d049e_JaffaCakes118
-
Size
21KB
-
MD5
3f17fe39c3750cf36e00d02ed92d049e
-
SHA1
4e68c3eb16e855cc4fb5b5990f372fce01753390
-
SHA256
27b1f51d75c91979cacec43c28940bdd8ec70958d4f3717236945e871317d429
-
SHA512
f5f998d6effe21444201e73474fd303276e229061b6ed115545c7344b03f260bbc43241607f6cef476ea7de45ba511e7f591df4e06ff03b532a73f9fac3f95ce
-
SSDEEP
384:SIiV728hUQ7Y2P/cVEccDdye7kjlWLe7grPiA8jyrMPhTjanbBoZvp1HOaNJawcV:SRGuY2P0Vo6r7SiAwyrMRjbBHfnbcuyM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f17fe39c3750cf36e00d02ed92d049e_JaffaCakes118
Files
-
3f17fe39c3750cf36e00d02ed92d049e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE