Behavioral task
behavioral1
Sample
3d8bf47f72b5ee06535869fcdb8a753e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d8bf47f72b5ee06535869fcdb8a753e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d8bf47f72b5ee06535869fcdb8a753e_JaffaCakes118
-
Size
770KB
-
MD5
3d8bf47f72b5ee06535869fcdb8a753e
-
SHA1
7d7429d7b518de328d0c9eef42e8068b4f62b648
-
SHA256
c13d8a8c25f8360b7d3e186a9707a55736877ba60a4249caa9a018975e9e06c6
-
SHA512
f1db838a80237a781168df93026b4da758fc7d4905eda62c05a8b91c99c0190bc4f7fdcdbdafc13eee336c21ac14b6026b995d774c217d34503c75af96bd6629
-
SSDEEP
12288:wA4SuZ65E4dzXJwCa7KkHlXq8UTEFY/QbmCMg4zD/yDUQA/LLTIGMvaN7JhOhv:lZE4dzZwUs8S4B/5uvaN7XG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d8bf47f72b5ee06535869fcdb8a753e_JaffaCakes118
Files
-
3d8bf47f72b5ee06535869fcdb8a753e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 677KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ