Behavioral task
behavioral1
Sample
3d1f3e41e4b11930f6828c80d15b6c3e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3d1f3e41e4b11930f6828c80d15b6c3e_JaffaCakes118
-
Size
364KB
-
MD5
3d1f3e41e4b11930f6828c80d15b6c3e
-
SHA1
b68aa7ea3ae7c4894cb20e27d565fb9a3f13592c
-
SHA256
fa9f232b4230495c416778f7e7fb5e1dabe8d8b89da80e65f6e39af35bd61aea
-
SHA512
cd23f2ecc48f499b697803f6f56ed8d92d61aa78953d8c50570382f9b8e231b7c8e37037490d3c2d048386728f060c576118992986ae1b759eb034ad4db1782e
-
SSDEEP
6144:gxJ61E0Fg0C7pzNZT3KUDEeuH4RU0yDaytuxcz7TPUhKuh91RpPaYoSMKy:gxgvC79NZTaGuwiuxu7Tkf91RpPdoSjy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d1f3e41e4b11930f6828c80d15b6c3e_JaffaCakes118
Files
-
3d1f3e41e4b11930f6828c80d15b6c3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 756KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 335KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE