Behavioral task
behavioral1
Sample
3bdfd5865d4166107b16ed23d677264f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3bdfd5865d4166107b16ed23d677264f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3bdfd5865d4166107b16ed23d677264f_JaffaCakes118
-
Size
464KB
-
MD5
3bdfd5865d4166107b16ed23d677264f
-
SHA1
87ee8f7b6d0d67fc9b2712defefebecf26b5a81d
-
SHA256
63975930a679fcd8fb45092463fe599c9d47c238e0c48d517aa5c1c9a6ea07a3
-
SHA512
40e2e215dc1f2f997e01b904b694aac971a50c65676af6a07d9b8395b59dee23ca3d1e0600de12a05e83e81f67d6efe6fb194267878ccf784392f409e4038934
-
SSDEEP
12288:62HgrfG1NUuaAGVdJJQk1QJ/zwEUHoQC:pArf+GHJ1g5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bdfd5865d4166107b16ed23d677264f_JaffaCakes118
Files
-
3bdfd5865d4166107b16ed23d677264f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE