Behavioral task
behavioral1
Sample
3ed07c79328c386103701660ddcaabff_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ed07c79328c386103701660ddcaabff_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3ed07c79328c386103701660ddcaabff_JaffaCakes118
-
Size
56KB
-
MD5
3ed07c79328c386103701660ddcaabff
-
SHA1
6976e0aab627f89507d2f43d3cdaaf39ef5ccfee
-
SHA256
f2f1f1ef4c543cdae9b8b32c26dd5c6e9a8ef3f589bbd0b8c6b39c895e8d3294
-
SHA512
4beb31b9b59d6ce39c1aa7d844eeee5bdd6d322e99a0c1a5808a4046a47bee8860e347d2719c2c866035db47b126f1b49f7afcfdc15dc5745bde4ccb4b6bb0b4
-
SSDEEP
768:yr0DNRmYoxJukUesMSxqsJ+ZDc4xasEucI/eUWcXMar7Hp49Df++uC2hFqa0:3DNeUeScP1WrcX77H+9b++uCmq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ed07c79328c386103701660ddcaabff_JaffaCakes118
Files
-
3ed07c79328c386103701660ddcaabff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 968B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE