Behavioral task
behavioral1
Sample
3b7cd9f6d50e76616b9f9f6156c9a38e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b7cd9f6d50e76616b9f9f6156c9a38e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b7cd9f6d50e76616b9f9f6156c9a38e_JaffaCakes118
-
Size
122KB
-
MD5
3b7cd9f6d50e76616b9f9f6156c9a38e
-
SHA1
87458531ca451a3f70b788388e542859ba92344f
-
SHA256
1652a91c87bc2df6089651362d1012ce684067b8be0bcde7bdb61b0e2c4bc762
-
SHA512
8dc328f270a6fbdc99a042d359c3adfff39a12903fd5b64f6d72a173446090d45d95578e85b3e1e4c058a739e62c19394285c23b19daf37158b9a5ad42c81e05
-
SSDEEP
3072:EpqlWTMuHd5twOlM1aUNdkv3mb95qIXXt0Rez1vcN3ipv4:3lWhHd7lRErqIqReFU3Mv4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b7cd9f6d50e76616b9f9f6156c9a38e_JaffaCakes118
Files
-
3b7cd9f6d50e76616b9f9f6156c9a38e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE