Behavioral task
behavioral1
Sample
3b3ef593c7f73b73bd6ab1fe1ec7f446_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3b3ef593c7f73b73bd6ab1fe1ec7f446_JaffaCakes118
-
Size
612KB
-
MD5
3b3ef593c7f73b73bd6ab1fe1ec7f446
-
SHA1
5174a9ac7f25996bd7b3173c30dcc7d865c41cf9
-
SHA256
e47e8cab70bf558fc922dc0013b5f0e772c6bdeccac6df5b353f7f6e1b5799c2
-
SHA512
3343be5343ea2fc01c0a1de435d7c055711d06fce307405927b4278d65bec04b3248738fa3d1d91cc79e5a349a87529bf68a921912e6e055d40c79fed3cf33e0
-
SSDEEP
12288:+ZUuLe5/JtvB1Y3DVlTHk1d8uzjvVLGmm8JK5J/jtveNo:+ZDLe5hpByHumufvVqb8sfJvt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b3ef593c7f73b73bd6ab1fe1ec7f446_JaffaCakes118
Files
-
3b3ef593c7f73b73bd6ab1fe1ec7f446_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 505KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE