Behavioral task
behavioral1
Sample
3c626c14b108ccf471abd086d2d99322_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3c626c14b108ccf471abd086d2d99322_JaffaCakes118
-
Size
55KB
-
MD5
3c626c14b108ccf471abd086d2d99322
-
SHA1
27d0e31910309378954474f2e5bdc427bb0a8732
-
SHA256
c1f2ba2128c480ff3cd4573126cf52c83808a6a60bc84ab080db440171b7b09d
-
SHA512
6786715b9f58d3a88188caa3101f9898d00f0a2175cb810f89ebadeab629dc526193ba3c30b7fd9e553962e02fe50a080fb13781e8c3a3dd6e3b0ceadc75a9e5
-
SSDEEP
768:oNI41sOvvE1fFfjvbfLEjTspixL61BZ/J7iSD4B25fgOvll0fgNa5A3:oKKsOHE1NDEjY5716BKfVwEAe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c626c14b108ccf471abd086d2d99322_JaffaCakes118
Files
-
3c626c14b108ccf471abd086d2d99322_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE