Behavioral task
behavioral1
Sample
3e95ca52662bfc0f745eb508dcd6cceb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e95ca52662bfc0f745eb508dcd6cceb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e95ca52662bfc0f745eb508dcd6cceb_JaffaCakes118
-
Size
861KB
-
MD5
3e95ca52662bfc0f745eb508dcd6cceb
-
SHA1
835458136b86159d069908b0500646ff114a5290
-
SHA256
fb70ea074ca6ceb1a31270ab24dd0f34128a9b46503f10a54822b66c0600c2a3
-
SHA512
50dbda2535fbe178c3bd69d2bcbe40b7e0ba9b9f83f8a604c31e980b550a5daa6a69770adbb18b9ed267a140eff919c50e7d376394b8df0f260b2680c7575e17
-
SSDEEP
12288:1oi7UwPLBJVTyxawhkBUBw6yuPC2eaZ6NkZl91+BKDj6SeeH8ZwGH7ybYYoS:1o8UwjBJVkG622UkZlvteecZdG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e95ca52662bfc0f745eb508dcd6cceb_JaffaCakes118
Files
-
3e95ca52662bfc0f745eb508dcd6cceb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 843KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE