Behavioral task
behavioral1
Sample
3f4b7dd2ff54e7aee804f71c0eb52f12_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f4b7dd2ff54e7aee804f71c0eb52f12_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f4b7dd2ff54e7aee804f71c0eb52f12_JaffaCakes118
-
Size
506KB
-
MD5
3f4b7dd2ff54e7aee804f71c0eb52f12
-
SHA1
0aeba3ded96b6cd94e614124186c9431218d9312
-
SHA256
686b4dc4c6b50f21f68746b090adccfa92f1a161619d02f7ca3288e708b09e91
-
SHA512
d9d9c2754311017766c9f91ade933b97ff11b40578d1a2fe0d179fdcd9473e364ff706c4b77a78c60679154ba26f0b0d4d0115659fc9fe795d161651a0068e27
-
SSDEEP
6144:jaUhMk70XLC1t9N9/W76hVj+VD3hbcd5SVtY/nWMSqKMXGY/uqp:jqkeLCP9NyEma3l4fM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f4b7dd2ff54e7aee804f71c0eb52f12_JaffaCakes118
Files
-
3f4b7dd2ff54e7aee804f71c0eb52f12_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 211KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE