Behavioral task
behavioral1
Sample
a3f981520c369cbd4504b6a06ae26b10_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a3f981520c369cbd4504b6a06ae26b10_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3f981520c369cbd4504b6a06ae26b10_JaffaCakes118
-
Size
97KB
-
MD5
a3f981520c369cbd4504b6a06ae26b10
-
SHA1
0609aa6082b350f6627a0513d982166913edccae
-
SHA256
dd9d99535d3964da6f57e9b56e8e97a84ab392c78c72eaf4ee24922d0398b014
-
SHA512
fd262834420c9afe2ed33aed082d7a83ecf377315dfabd69d5886e78d6718e8cab1c59f191673740805338ba533167b6b70d1af48d8b545c7c5606e0393edc61
-
SSDEEP
3072:c0wJVhQV9Pa4asyWKTO7itIK4zrKG6hjiy5l:c0wJV6V9PRarO7itIhHuhWY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3f981520c369cbd4504b6a06ae26b10_JaffaCakes118
Files
-
a3f981520c369cbd4504b6a06ae26b10_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE