Behavioral task
behavioral1
Sample
3baef362d7ca8f9798d3964414fef351_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3baef362d7ca8f9798d3964414fef351_JaffaCakes118
-
Size
1.3MB
-
MD5
3baef362d7ca8f9798d3964414fef351
-
SHA1
cb137fef7524614d72c50b2de4c6ef6152c6253a
-
SHA256
63604b50c997ceacc7b689e8fa79d91fbe2e2b6adf76601f0f6dff6fdc8bb169
-
SHA512
dc0961eca22bda7eaa4452d5472b7576e9548059d00fced70cc4e2cabfef0ad55f598bcd16c0439e8b2a7091faba4ba74f4bf9674b0a39814dcbad2dbb8ca5e5
-
SSDEEP
24576:muj/VEaecgvjdcR2ARF9AjORbomMQzuYbMTSsEPwFq91B2VXvvG:mKVEae5bda28F9AORbEQ6Yb0Sscww
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3baef362d7ca8f9798d3964414fef351_JaffaCakes118
Files
-
3baef362d7ca8f9798d3964414fef351_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE