Behavioral task
behavioral1
Sample
3b7ccdcd45bab6cf0f558b67048cba3e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b7ccdcd45bab6cf0f558b67048cba3e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b7ccdcd45bab6cf0f558b67048cba3e_JaffaCakes118
-
Size
79KB
-
MD5
3b7ccdcd45bab6cf0f558b67048cba3e
-
SHA1
5b63b256f538de21fe366be4885a61c518224eb0
-
SHA256
58259aa532b09b6252b5d9e810fe3a9340d291f5405b3a69c0b15d6192a873d0
-
SHA512
346407f3d4536871bd2e7579d47591dcaae964d3b439e470b5541f73600be679f1bf49aaa3e9195640c8030e506ceb46232fd65790d9daddbd7de1539472aa0b
-
SSDEEP
1536:HvQxx9FcTeyKu/Fe4tRhTyWeyz+cvMduAN8TZ2zsCiXzXT31bSqqxG:HY3cTeyKu/Fey+WLz+cvDAdICsexG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b7ccdcd45bab6cf0f558b67048cba3e_JaffaCakes118
Files
-
3b7ccdcd45bab6cf0f558b67048cba3e_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 384KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 664KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE