Behavioral task
behavioral1
Sample
3ba954a8d6e115772bd746d7ad28e8a4_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3ba954a8d6e115772bd746d7ad28e8a4_JaffaCakes118
-
Size
784KB
-
MD5
3ba954a8d6e115772bd746d7ad28e8a4
-
SHA1
87fdac8a43383ec7932a92782e1690669c0077f6
-
SHA256
5fa665899ce61b0b65083246865df9898b97998234c5b451b4562592b2231557
-
SHA512
da7006f5b8fd1688bd7ee02077e872c0213144be6ecd6eaee7a301de3d6573081f7043f871b593a05b68aeffe69a7830c2ffeab2c6bad261f341cff515432bdb
-
SSDEEP
24576:nT94F9KRIE4RQDEctOt6FoHN5ylzVr4Jh:nOF9K1vWGON5SR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ba954a8d6e115772bd746d7ad28e8a4_JaffaCakes118
Files
-
3ba954a8d6e115772bd746d7ad28e8a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE