Behavioral task
behavioral1
Sample
3b5d368e2436c7a86a607846d0ae0b23_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b5d368e2436c7a86a607846d0ae0b23_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b5d368e2436c7a86a607846d0ae0b23_JaffaCakes118
-
Size
62KB
-
MD5
3b5d368e2436c7a86a607846d0ae0b23
-
SHA1
b1a8e166e26bf728fa5aceea24fb3f1d6b0f7556
-
SHA256
4ffb27a07709515af47938ac78f19d815d754d8a68a8c8dd8ef073779df07e7f
-
SHA512
81af3b8b8bdff658c17a60508f91d2715679f990533b197a066a50336b57294d3fd610013c49592fc3f56702ecc8ec5882fb635a5f4a0f149cbb7aa80b373e5d
-
SSDEEP
1536:kBCM9iBJBH5/q1xEIH2F9T3L0+y6nouy88EY5qXXA:oeBJBU1xK9jL0Iout8LIXXA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b5d368e2436c7a86a607846d0ae0b23_JaffaCakes118
Files
-
3b5d368e2436c7a86a607846d0ae0b23_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE