Behavioral task
behavioral1
Sample
3c7e826454d33100f06978cebbdb3f43_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
3c7e826454d33100f06978cebbdb3f43_JaffaCakes118
-
Size
22KB
-
MD5
3c7e826454d33100f06978cebbdb3f43
-
SHA1
3851bc81d3d2c649c123d9e595e2146f279f9652
-
SHA256
a92e20c95c6fb030400179c6ac2c1e7fe75e715c80fcdacaf8c4714f7110ffe2
-
SHA512
53b51591b9d72e12358b03f58c1674223df7ee9ea8a5af72757f8c24d5d9ba0bbf9cf574fdf9bad4ae839a543997edfafc1a4fbba5021b1e013a845ae95123e2
-
SSDEEP
384:wIiV728hUQ7Y2P/cVEccDdye7kjlWLe7grPiA8jyrMPhTjanbBoZwiPDFIh4aNJO:wRGuY2P0Vo6r7SiAwyrMRjbzDihRnbco
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c7e826454d33100f06978cebbdb3f43_JaffaCakes118
Files
-
3c7e826454d33100f06978cebbdb3f43_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE