Behavioral task
behavioral1
Sample
3e1c4f6c6ecca225c38be29cb8f27bab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e1c4f6c6ecca225c38be29cb8f27bab_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e1c4f6c6ecca225c38be29cb8f27bab_JaffaCakes118
-
Size
187KB
-
MD5
3e1c4f6c6ecca225c38be29cb8f27bab
-
SHA1
827e0f99727b7d3170e96c00d7f1ea5f8c49072f
-
SHA256
03ac6ea5663a24647ec6e10a603f2aa392a0e1c7edb5d7a1739fe40a22be61f8
-
SHA512
62c94cca9d5c5e4f94e8714fd501b4f33dc7b12c6cd7bf91c5698b645cccfc8de147e342a0a6291621f386dd91de4f67fc0e9f682ebd61fb6040c7ecc4fbcf42
-
SSDEEP
3072:EECm5mwNZli9r/nzaiXWeqN9sVrTSVs8n9gWhpycIyiTNt/0outKBr:EEXgMMr/m2Bq45TSnn9gWhp6NtcoSK9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e1c4f6c6ecca225c38be29cb8f27bab_JaffaCakes118
Files
-
3e1c4f6c6ecca225c38be29cb8f27bab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE