Behavioral task
behavioral1
Sample
3d11b76a837f11b01ff5ae92c6e41f1e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3d11b76a837f11b01ff5ae92c6e41f1e_JaffaCakes118
-
Size
784KB
-
MD5
3d11b76a837f11b01ff5ae92c6e41f1e
-
SHA1
27e1b6166354636c93c6c6bf79595a0ac00e2f7e
-
SHA256
f519d0884d5d3e18cdc2653ec6d78f118372744f854b8274d4733080f9429e59
-
SHA512
bdd4d0f7ba1268fdea121bf18130a92bf60c53bee70ba5293348efe096d7bf648c4c19f7ec3c6384cb80c6caf19acef3b251cab2272c15ec44d448d1976fe25f
-
SSDEEP
24576:Btj1cF8oWDyRCdvwJQzNfYLaqOAq0X7rNcCQGL:H1g8NDp2QpfYdRcCxL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d11b76a837f11b01ff5ae92c6e41f1e_JaffaCakes118
Files
-
3d11b76a837f11b01ff5ae92c6e41f1e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE