Behavioral task
behavioral1
Sample
3bf99fc76e67c7fdea6616635c1f5f9a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3bf99fc76e67c7fdea6616635c1f5f9a_JaffaCakes118
-
Size
842KB
-
MD5
3bf99fc76e67c7fdea6616635c1f5f9a
-
SHA1
cfa74f35f4a0bbc309ad52080c519d6b9a50d0ea
-
SHA256
cde91d171e1c6cebe9d5ad63542e5b9b7c959c871c208ef83e5131d37a643df9
-
SHA512
1b610dbec66c5d15342ec8b82316e915d7124281e92cf93a6152fd5ecf46079d62e4db4b9eeca6df048ce7794a0270adbcb18b1a686aa507126cc21106d50605
-
SSDEEP
24576:DXjQQa7TZ+VuSNym8i0kjyxbPjAA4XdYgqD:DXjxaQH0kexPAA4XdYgW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bf99fc76e67c7fdea6616635c1f5f9a_JaffaCakes118
Files
-
3bf99fc76e67c7fdea6616635c1f5f9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE