Behavioral task
behavioral1
Sample
3f6085b848501762e73240f9ee268571_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3f6085b848501762e73240f9ee268571_JaffaCakes118
-
Size
1.1MB
-
MD5
3f6085b848501762e73240f9ee268571
-
SHA1
4c20e96a1c5d46221f9f2baca98febe3831060e3
-
SHA256
faa51fa50f110a6a4165e2b37be4d7b6cdd3e0acc647071abba74de895f01047
-
SHA512
1001868dc399f5bbc5214efe3198e0fcf4f7c10f90b338ccd89b39f50c907635e5de1752030ec2b4895906f278b903d7110775a739bbf8e4fc4f4c5f12a23cd9
-
SSDEEP
24576:ws7jLO8s0L7vfedzTyW58u3UaDbtWBKTaXw0v6Tn:tD1p4HyW+lafIBKTaF2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f6085b848501762e73240f9ee268571_JaffaCakes118
Files
-
3f6085b848501762e73240f9ee268571_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 580KB - Virtual size: 580KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 485KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE