Behavioral task
behavioral1
Sample
3ad19aec16d1ae4057e13a8d12a0b8c1_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
3ad19aec16d1ae4057e13a8d12a0b8c1_JaffaCakes118
-
Size
9KB
-
MD5
3ad19aec16d1ae4057e13a8d12a0b8c1
-
SHA1
34bbb8388aed15e263473f0459f499fa8a65099d
-
SHA256
b28f8efd6a0e307c1d666040cadc9dbc64ee2e0a17003c5a16cdb7e38cca9f4d
-
SHA512
91ade1b4d4c9d6b046f17f0a38327cee909cfe7c17ffeca956d288e8a1b3ad622c199476d7eac95c57d963aeb8d788a4e95271c4a62098afa6805ca1e12dec43
-
SSDEEP
96:nPx7kZS+WSAYtYceAGrnCj73BjOk3t0qqdbc39xQgsEsjklGNJM/1y1JlgRB6uDF:np7UjAMQ3Cj730qqdbc6ljYsKPuWEStt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ad19aec16d1ae4057e13a8d12a0b8c1_JaffaCakes118
Files
-
3ad19aec16d1ae4057e13a8d12a0b8c1_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crkT Size: 596B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE