Behavioral task
behavioral1
Sample
3bc08f40d1c9dc840fb3c5771758fe7b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3bc08f40d1c9dc840fb3c5771758fe7b_JaffaCakes118
-
Size
715KB
-
MD5
3bc08f40d1c9dc840fb3c5771758fe7b
-
SHA1
6cf0abd29aea885d2f6164f52be8742ff7dbe977
-
SHA256
afd27b6594139a20a69ac06dfc74b2de04345e3d3a012efd57b153b90cc2dabb
-
SHA512
b4eb3dcc01f1d401d655067ebf6b7e9f8c0d9b1b3ed43cadc7b867f0c9aaaf92be822adbcd3aa6663fbd48ed11366273eccd91c49aaf536e0fb8c6869e4b2abd
-
SSDEEP
12288:ad0hFRpLwscT8EMh1y8IzE5WdLxU5Xf3HgLxEezd4d13TC9wX1q7sJa2H+sV:o0FHjcT81y8IzE5sLx4Xf3HgL+44bTqM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bc08f40d1c9dc840fb3c5771758fe7b_JaffaCakes118
Files
-
3bc08f40d1c9dc840fb3c5771758fe7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 679KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE