Behavioral task
behavioral1
Sample
3b5e10a2af674b3075882ed035286ca0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b5e10a2af674b3075882ed035286ca0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b5e10a2af674b3075882ed035286ca0_JaffaCakes118
-
Size
884KB
-
MD5
3b5e10a2af674b3075882ed035286ca0
-
SHA1
cc38a7c8846cd047f7e89d7d22358b30e3dba68e
-
SHA256
96e380c3a3ae5ba8d1ef975bda9341c1bdedf6fa674dce1c85ebf40ba695bda8
-
SHA512
3d207061f646673ba83268998baad7eb765dcfdf4477c1ed0539dfa0ae00d778efca31f4cee91f5e46c2c31d4ea2b8d3e123ed444c47b47b208b6388f37b9442
-
SSDEEP
24576:qau1R6Q9pp5OOXy814bb3HxFgNZfEpQLpNneZyKxSmNJ+xYAX3S:I4+xnHS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b5e10a2af674b3075882ed035286ca0_JaffaCakes118
Files
-
3b5e10a2af674b3075882ed035286ca0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 532KB - Virtual size: 532KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 118KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE