Behavioral task
behavioral1
Sample
3759ddc04131b687635742b6e8c787ce_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3759ddc04131b687635742b6e8c787ce_JaffaCakes118
-
Size
64KB
-
MD5
3759ddc04131b687635742b6e8c787ce
-
SHA1
98b1cb1b477365bdec308a9f7c73d486e7297070
-
SHA256
6c5d682fe99a2dd20e25d4d98dc17c30bfa6ca9337fd0a7551a34821b151ce4a
-
SHA512
b9250c5c9e50ab2db404a62d42eda93194b441f69fbd4879c360d9bbbb661edf43e6d3f74baa73d2719f4bdc82ec6c03035f3c0f7f83907e1974f7788ff08ce1
-
SSDEEP
1536:UunKVj0LN67Vp+hNuLXGfTSmZDObotfcn4Fnouy8D:LnKpqffRfTSW6stfcn4doutD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3759ddc04131b687635742b6e8c787ce_JaffaCakes118
Files
-
3759ddc04131b687635742b6e8c787ce_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE