Behavioral task
behavioral1
Sample
3facf5e86cc126090bb569be1294a559_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3facf5e86cc126090bb569be1294a559_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3facf5e86cc126090bb569be1294a559_JaffaCakes118
-
Size
11KB
-
MD5
3facf5e86cc126090bb569be1294a559
-
SHA1
7fc80b651da24dfc668805eb6a474031c46c38a9
-
SHA256
385d04b9e04d661f26d7b6f360d4625ba53090f6b45f559939615a9ffbdc3c9c
-
SHA512
fe261b946f285eb5d38f1ebe9e831d1bdbf2f5e457f8db6c38afba6c76069f99d0092c114069ec5408a78b1a101d5ab8ac190c4e2cdf2284f61657f8f1f04f41
-
SSDEEP
192:hDU5jIfBemZNKbDGDIWBhFaNJhLkwcud2DH9VwGfct6qX:VU5MfBe6sDG8WBXaNJawcudoD7UP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3facf5e86cc126090bb569be1294a559_JaffaCakes118
Files
-
3facf5e86cc126090bb569be1294a559_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE