Behavioral task
behavioral1
Sample
3e5e3dabfa07ee584679505e0296ea99_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e5e3dabfa07ee584679505e0296ea99_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e5e3dabfa07ee584679505e0296ea99_JaffaCakes118
-
Size
332KB
-
MD5
3e5e3dabfa07ee584679505e0296ea99
-
SHA1
670aa75cbbd904d5bb0cc0e2e7d125fa407895c0
-
SHA256
dd5809da2c64452f0633c20b8e0bf1c553490a80ce2f6e1d7e72e02bf5d00694
-
SHA512
cff8554f7a03b73c927a2b319501cd4b1c5a8efc8f2a1e897d2a869ac098e5b162c1d30d5d28c0f726158c0277c8b788089e8a60a55d38ce4b3bd990ccf8bb45
-
SSDEEP
6144:+/HUKHmaXjudjyCSJp2epBKqN8G038B2IXso:WJmaX6J2jxaG038ko
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e5e3dabfa07ee584679505e0296ea99_JaffaCakes118
Files
-
3e5e3dabfa07ee584679505e0296ea99_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE