Behavioral task
behavioral1
Sample
3cce924c2001536a0aa1ba363786a87d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3cce924c2001536a0aa1ba363786a87d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3cce924c2001536a0aa1ba363786a87d_JaffaCakes118
-
Size
480KB
-
MD5
3cce924c2001536a0aa1ba363786a87d
-
SHA1
f9058dd93b3e60eafc3b053bf00961ac96bec2dd
-
SHA256
2013c6905496f7a932dcec503a7d28d806ff82f253f452f208c43ce2454a563d
-
SHA512
db9d1abed3d909d437c66e05324f84b5116f1d2fb83f65eb3a3fbcf9e14bbf0a3b94e088cd7f299c131bb63b567262716460a5a78656703300bc6d47353fe435
-
SSDEEP
12288:nTQhg0wKGafGgPkE8an2MW3HXONkAmQFItC2YuLaXldJ:nTyGwkBqzS3ONkAWtC2FGXDJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cce924c2001536a0aa1ba363786a87d_JaffaCakes118
Files
-
3cce924c2001536a0aa1ba363786a87d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NUPX1 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE