Behavioral task
behavioral1
Sample
3bd9c0a585fa5639da8d3073406637c3_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3bd9c0a585fa5639da8d3073406637c3_JaffaCakes118
-
Size
262KB
-
MD5
3bd9c0a585fa5639da8d3073406637c3
-
SHA1
e61b89916dd133a942cccfd26baf6118d1fa5bed
-
SHA256
b90701fd12e3404ab01267ae242558909f6a8d24cbd29814e6ba2ff9b78daeda
-
SHA512
f5301ae0190eada1e2cda82773be1aaf4e1435e1bc2783e177c906fbdbea2cf247595d8ac3d49932fd21617a0c0b80b5bd4dacda29eaf40a104964e6870d7c37
-
SSDEEP
6144:jYPOodm30xwcPITn2U82xZkckexoS8pm97WQP:Ydm3xclL24cVoS8c97Wy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bd9c0a585fa5639da8d3073406637c3_JaffaCakes118
Files
-
3bd9c0a585fa5639da8d3073406637c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 452KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE