Behavioral task
behavioral1
Sample
3fba2f5b92de1cb2cb1c1800864086ec_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3fba2f5b92de1cb2cb1c1800864086ec_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3fba2f5b92de1cb2cb1c1800864086ec_JaffaCakes118
-
Size
434KB
-
MD5
3fba2f5b92de1cb2cb1c1800864086ec
-
SHA1
fd2a5217d1ee4f8a3ca8f0ca069eee6cac4ad28b
-
SHA256
ec7aaefb2fe8bf555b9fb4d39b4280f6775cf9c783f6f36006786e821b3357ed
-
SHA512
fc94b559684c3f5f9aceb435dba4e0d4a1fd651aa78bd23b141bbd2aad80761964988be426fad85bafad2743f0e222166d6dbfe871ee4e8947f1d0a8924bd5a5
-
SSDEEP
3072:hyAa7Ke4HmL3sOq7ho9MnVqNkr6FbY96DdZkm6kflNnJr6:h3Je77sRt+kee9Y4WlNnJr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fba2f5b92de1cb2cb1c1800864086ec_JaffaCakes118
Files
-
3fba2f5b92de1cb2cb1c1800864086ec_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE