Behavioral task
behavioral1
Sample
3c49c16032b035bd9da1a828f639624c_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
3c49c16032b035bd9da1a828f639624c_JaffaCakes118
-
Size
784KB
-
MD5
3c49c16032b035bd9da1a828f639624c
-
SHA1
f4c4b8cba764f53ad5a909ac99e2b609dff2def8
-
SHA256
518e96ac10eae25fbc622d5aed53c5c2114f13815eb120688e852f37687af7a2
-
SHA512
f5ea5c2c3740647860c10910f5d48b666edeeede9752b42a3773ba0a79569e1b6ed7a7f09a9f9f26df5b0d3c5154de0621c8671807d1bf730f735a02c88fcece
-
SSDEEP
24576:TawcD7eP9FfB9+8dE7G0JIc9O4Kr2wme/L:T0m9Fff+qE7G0JP9nwxD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c49c16032b035bd9da1a828f639624c_JaffaCakes118
Files
-
3c49c16032b035bd9da1a828f639624c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE