Behavioral task
behavioral1
Sample
3111a3106deb81f6f6d33ddf4175cb2d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3111a3106deb81f6f6d33ddf4175cb2d_JaffaCakes118
-
Size
2.9MB
-
MD5
3111a3106deb81f6f6d33ddf4175cb2d
-
SHA1
49ab13125f02f99b3893f31b82c75dd2a848316f
-
SHA256
0d670cf28bf99dd7b51d38319312ae51176195da02be46d2c324911b58fb91ba
-
SHA512
cf1a6662ea03d389f47131cce4c064c2a50320a79551a141e19f6b2114fc013f1ed2861ba477656f8570b0641235b434d1ceddaaa3e7b734b673d88c1791bacb
-
SSDEEP
49152:Y4hBPcz45QXs1iJ+S/SjiMOTP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:DBcVs1s+S/Sjp+gg3gnl/IVUs1jePs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3111a3106deb81f6f6d33ddf4175cb2d_JaffaCakes118
Files
-
3111a3106deb81f6f6d33ddf4175cb2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE