Behavioral task
behavioral1
Sample
3bc05b039dafb4d5949321a73bd0f800_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3bc05b039dafb4d5949321a73bd0f800_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3bc05b039dafb4d5949321a73bd0f800_JaffaCakes118
-
Size
54KB
-
MD5
3bc05b039dafb4d5949321a73bd0f800
-
SHA1
fc05b86c5b09d0baf22ca89d5cc807775bc67214
-
SHA256
5d6af83a158354d1ebb017e0fb5fc68798d2212e400aa5f3d3d8ddb6c2ed0a4b
-
SHA512
a882de6f58f6329a889ffd531890da1682b4e0ba3aa15ec3651e533267547487f78c6219ed81b9dbbf0a76113575c455e00be8b5f24aa62a7a52b646d10cbef9
-
SSDEEP
768:02VXzYXBjc2+dIsvK3VkDasnYS65OPziHIkZL5qCXXzjXBT:ZVEjcVbK3swA2HdZLLzNT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bc05b039dafb4d5949321a73bd0f800_JaffaCakes118
Files
-
3bc05b039dafb4d5949321a73bd0f800_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE