Behavioral task
behavioral1
Sample
3e23b4fab79ee8388cd2b7ac048f1768_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
3e23b4fab79ee8388cd2b7ac048f1768_JaffaCakes118
-
Size
784KB
-
MD5
3e23b4fab79ee8388cd2b7ac048f1768
-
SHA1
6d22411cbf632836adb92647d545905c4cf6707d
-
SHA256
ab3b3d9388388f3533af1167630d2bff414542d18bf51a94917319db9ffc9834
-
SHA512
d59a8c452229e7da42e18ba20d259b8915768bc54a54b9b6028208c6dcf133f847deceefa021ccfe3b9d97a44b83c79172b331f41a5735a1f3d687572513a95f
-
SSDEEP
24576:G+g0OJDz9AgmLxYJ18Xgn+in9BtvrVFps:GF0TvYMgn+itVP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e23b4fab79ee8388cd2b7ac048f1768_JaffaCakes118
Files
-
3e23b4fab79ee8388cd2b7ac048f1768_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE