Behavioral task
behavioral1
Sample
3b327ff9fed9902a53ef37a625d1f944_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b327ff9fed9902a53ef37a625d1f944_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3b327ff9fed9902a53ef37a625d1f944_JaffaCakes118
-
Size
149KB
-
MD5
3b327ff9fed9902a53ef37a625d1f944
-
SHA1
dc5f9438d8c2c0c0160e44f8acefad5d649ee79b
-
SHA256
f528c910be4e3ba5b6972c9f982a72d2f0f19a276ec5658ef1ac8b9a3e44f317
-
SHA512
7fa200eaf9c94ac9b53f74fb5fd25489cacc7eb035aeee45ea2b33fccb5edb0370e75e883e650aa2db83e17af6c6e3d8ac1232816af7ca598a3754c7611d145f
-
SSDEEP
3072:7h+BOw6jBlNCPb6M/R2eoLw7g/vPG3IF8:7h+BL6jBEF/P0/GYu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b327ff9fed9902a53ef37a625d1f944_JaffaCakes118
Files
-
3b327ff9fed9902a53ef37a625d1f944_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE