Behavioral task
behavioral1
Sample
3750d24ce5dc1f9bf4b131221b7c9e65_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3750d24ce5dc1f9bf4b131221b7c9e65_JaffaCakes118
-
Size
165KB
-
MD5
3750d24ce5dc1f9bf4b131221b7c9e65
-
SHA1
b4490a789072cfa654fe58fee82ce59530eb53e8
-
SHA256
de9416a1fa51daac6a302b1177363981dc0b215228f10e030a978c71c2b3f628
-
SHA512
6e763594b816e36c0c829a44eff7d9838e75415909a85ec436904d3a32234fa40308233d9191ea6e85ae77ad258dea9cdca1adf66a761430cea2cad8c9450407
-
SSDEEP
1536:9SAmMBffUyQ0/x2E6iE0NZ3cDQW8HHrqW1Pi9JwIyJSlDQrw++2yXiX5zv1ciq4H:lx6yQQ6uHgw7U8w++2ag5WbFeraC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3750d24ce5dc1f9bf4b131221b7c9e65_JaffaCakes118
Files
-
3750d24ce5dc1f9bf4b131221b7c9e65_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE