Behavioral task
behavioral1
Sample
3c955b962a89f78ae1a08e8ff80e891c_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
3c955b962a89f78ae1a08e8ff80e891c_JaffaCakes118
-
Size
403KB
-
MD5
3c955b962a89f78ae1a08e8ff80e891c
-
SHA1
7a2035d085a71d8d79a2646ec5d4252be22aa897
-
SHA256
e3963d44cb0a5d568bd1b6f07a2f543607c9a91d4f05e31f30ce3f986321b242
-
SHA512
4b3094db84bcb66ebe5d3a14f86ee684ca391577ad158657a8e346d973a2fca6410b79112a69bc3c33c32c3da9d5705a1617c7f6e4dd8f13bc08c14435fc6566
-
SSDEEP
6144:Udq0vS9VRjoNTnSZcpt77/HAdqT36j7F5W+hIW5NhbGGeMJXEAIKyEry6lz2tmMT:QdvQAocPHvYqji55WTWPhqGeCjnzS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c955b962a89f78ae1a08e8ff80e891c_JaffaCakes118
Files
-
3c955b962a89f78ae1a08e8ff80e891c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 460KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 397KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE