Behavioral task
behavioral1
Sample
3c2b687002b0dc875fc8de798f2a3868_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3c2b687002b0dc875fc8de798f2a3868_JaffaCakes118
-
Size
386KB
-
MD5
3c2b687002b0dc875fc8de798f2a3868
-
SHA1
7a01d8cbc9dcb60b1c7b0ccc244bd3ac8378e371
-
SHA256
27eb4efce6f8fca3bfd98904054afcb460804ff511e1629c0218f378b82a92fb
-
SHA512
49915fd5f6c60c5d4c0538b51ca2b73c437854265c189784425ff39e163c82d33db7712f1f363252a2e4f241f2301c12f64634d6c8e1ecf98300444259b87dea
-
SSDEEP
12288:69xZ5yN3Cwaw//ikDju436I26h+OoS9Otz:69vsky/7NKDm+1z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c2b687002b0dc875fc8de798f2a3868_JaffaCakes118
Files
-
3c2b687002b0dc875fc8de798f2a3868_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE