Behavioral task
behavioral1
Sample
3e0f940e6a8f9a542c6f958358a751f6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3e0f940e6a8f9a542c6f958358a751f6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e0f940e6a8f9a542c6f958358a751f6_JaffaCakes118
-
Size
154KB
-
MD5
3e0f940e6a8f9a542c6f958358a751f6
-
SHA1
c1997a92fe89cd1a14ea0bb1c38936bcdd06de3c
-
SHA256
29951f78088c07fd552b648fdeb9bb4913441aa6d0a1984957e30ebed9636616
-
SHA512
1fd8d4d170f999db2fc16c42f2a02ca216b9ea0dafdb0cabcc6f5089891d27da6728b3cdc4874d40871d6d7584b6287ab7175a9522b2e2d54a4dca953e69dc76
-
SSDEEP
3072:A+x+HyKkA5Ce32ashn5abfd9lefGfD07aw41H8RzQfHD8vxH5iW25MNr6F0AR:FEWA5Ce+l5sTzDtHIzQQvxHc7MNr6b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e0f940e6a8f9a542c6f958358a751f6_JaffaCakes118
Files
-
3e0f940e6a8f9a542c6f958358a751f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE