Behavioral task
behavioral1
Sample
3c43583ba0a92f624d08843ebf2439a0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c43583ba0a92f624d08843ebf2439a0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c43583ba0a92f624d08843ebf2439a0_JaffaCakes118
-
Size
1.6MB
-
MD5
3c43583ba0a92f624d08843ebf2439a0
-
SHA1
85983739774b5501fb39556d560e5fdcf14efe33
-
SHA256
85fe1e49ac1d98f23937a0e626307c07d9412e3c23fbb3cd454e7846f64e3414
-
SHA512
f35c1198d0813b1bb96dbb5c1a1f7f3fed1f3d1225e1ef28c50cc6030a0053fe768797780cebaeb4cb0d9e64a46e93f58cf925acf2e476a0338eb1fa0652c8a5
-
SSDEEP
24576:YnSDfX/+N3mcNCilEP6QXyE39yulkkstVxktMlytaBEe+0MxMl:AfTrlUxcqo7OMl4oEeWMl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c43583ba0a92f624d08843ebf2439a0_JaffaCakes118
Files
-
3c43583ba0a92f624d08843ebf2439a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 932KB - Virtual size: 932KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 682KB - Virtual size: 684KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ