Behavioral task
behavioral1
Sample
3699ab4804aa14071bb0ddeb3a25c338_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3699ab4804aa14071bb0ddeb3a25c338_JaffaCakes118
-
Size
360KB
-
MD5
3699ab4804aa14071bb0ddeb3a25c338
-
SHA1
210e1450ea2ebcc0b967f2007af054d3aa1b51f8
-
SHA256
aaf33ba83de1add1f9c8bd3c9e76850952287a82c146f048780887ba2c12879e
-
SHA512
31800c9958ab1e6edb0916f46379025bdb70caa1823ade800728d877890c00b7d4150264208cebebc0679faf0aca36dfec1e8c142f95950abc4b4792b97e5b67
-
SSDEEP
6144:qWWljwuMRbd8qdKNgmtT22hCwyQlTgALXqo1jmUZxL6xQGQgg:EwuMRZ8q+gA28CwPZNLXqs76P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3699ab4804aa14071bb0ddeb3a25c338_JaffaCakes118
Files
-
3699ab4804aa14071bb0ddeb3a25c338_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 154KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE