Behavioral task
behavioral1
Sample
3cbeee89fdf3219c5183c4796c07b1c2_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3cbeee89fdf3219c5183c4796c07b1c2_JaffaCakes118
-
Size
241KB
-
MD5
3cbeee89fdf3219c5183c4796c07b1c2
-
SHA1
f5314a37d6728c798606732e32bbe2bda518b2fb
-
SHA256
ac11adbe32dab0d4132f4ea389ff1274e9150563380a545bb30249ccdee139e2
-
SHA512
2df8717c3d3d7a0a49f6d93a06e9dfc0bf75b1c74b0553fefd75f8956659d9fcf1e93f69421e2449712e53a09c0bf48ba34abec0e3b5bb5e038e26604356c00a
-
SSDEEP
6144:vIlRKkBYTLLKGaOnR00UnxU7XjlxZw6Bx0gurTkqYllh3:glQFLLKVoy0UnWf3g/KzV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cbeee89fdf3219c5183c4796c07b1c2_JaffaCakes118
Files
-
3cbeee89fdf3219c5183c4796c07b1c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE