Behavioral task
behavioral1
Sample
3e56ecb2386ea94f1b51e8e756bdcdd9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e56ecb2386ea94f1b51e8e756bdcdd9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e56ecb2386ea94f1b51e8e756bdcdd9_JaffaCakes118
-
Size
13.0MB
-
MD5
3e56ecb2386ea94f1b51e8e756bdcdd9
-
SHA1
adafb1b2cd662f12bc021231da8a1b536f1c5e42
-
SHA256
754d803e70d5e8c14456332842360f3ab428c31a11b375a132c3ba3329c30b03
-
SHA512
6bfd6231ab4c72c6f177eb34afceb282d227c39a316e8d1382858592a70daedc881dfb861107f8037dbf3c574edebca3398b9371b8cdef4e13bb5884ba70a8ed
-
SSDEEP
6144:pPpTaXUvSB5KLwhLTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTl:pB0Otg9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e56ecb2386ea94f1b51e8e756bdcdd9_JaffaCakes118
Files
-
3e56ecb2386ea94f1b51e8e756bdcdd9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE