Behavioral task
behavioral1
Sample
3bcf61f8a3b5c712fc72214acb2f8b49_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3bcf61f8a3b5c712fc72214acb2f8b49_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3bcf61f8a3b5c712fc72214acb2f8b49_JaffaCakes118
-
Size
1.5MB
-
MD5
3bcf61f8a3b5c712fc72214acb2f8b49
-
SHA1
15924d146a8998780a3aba79c4de1a2c964b7f6f
-
SHA256
a5c05451c7cfe0d2dc291e6260a28404db0ae9e3a3bc638c7f5ec677c12a3418
-
SHA512
72ad9a8e562accee0cc5bd9c8298a2433ada4ea05435e02f79edd0c27e67e7c595884965a55622af8fe44394ed2f9ac317a4db15df28a5d4a4722c53244123c8
-
SSDEEP
24576:F/agfBj0KdLdE7cOTKA47hHT/+GiA2qa+ikjngd8ZAqEbW3RHG2N:F/Pj3CcyKVhz/+i2LMjnI8ZsW0Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bcf61f8a3b5c712fc72214acb2f8b49_JaffaCakes118
Files
-
3bcf61f8a3b5c712fc72214acb2f8b49_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE