Behavioral task
behavioral1
Sample
3ec49340c356a4817368b8aab1aa5ab8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ec49340c356a4817368b8aab1aa5ab8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ec49340c356a4817368b8aab1aa5ab8_JaffaCakes118
-
Size
227KB
-
MD5
3ec49340c356a4817368b8aab1aa5ab8
-
SHA1
9fb18d60fa34bc744f13925838b416a9642f16a0
-
SHA256
9ef4ca92b34b836386875a63f68d46df7200979f299cb866d1d03eb7618f0b98
-
SHA512
2bc4cdb4104d4819f24441a7f75059d6c6c87972b082e1550c5f6ec2593ec9edd8a3b504316e418697e1942adc04a1fc7c654d8ffd5b4fe877e2cb073a37dac7
-
SSDEEP
6144:k9JUAYiTGyrcUKWRZzFvOjoiIZzw+fWIIOtueUbn2oSt:kU8rcUKWrQ6c+fWwtkn2oSt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ec49340c356a4817368b8aab1aa5ab8_JaffaCakes118
Files
-
3ec49340c356a4817368b8aab1aa5ab8_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE