Behavioral task
behavioral1
Sample
3d25117a946d8ef9cc380eaaa5aa36fb_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3d25117a946d8ef9cc380eaaa5aa36fb_JaffaCakes118
-
Size
478KB
-
MD5
3d25117a946d8ef9cc380eaaa5aa36fb
-
SHA1
c0c8795480b5cbd2221cba1414b994aeeffce94f
-
SHA256
7bf972d16a4de3b3df9c3a37ca30edc593249e6a70d73f6d9d77803b167fe0af
-
SHA512
7c0d5ecf9d86fe74dd493af45a4abc7220bfdb417a89fb2e1d34f66e1c5d2dbaed3bb49e2c45914c7dcfc01e1b74fb427f22cbef7725003b396e593e3fcc03a3
-
SSDEEP
6144:eFTy2i+3Tm3Fzn2yPHGDaPKZf5cZaAr9CFnW42ABtQXlRx:ew2iwqVz2/fZhcFAFnWtAsT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d25117a946d8ef9cc380eaaa5aa36fb_JaffaCakes118
Files
-
3d25117a946d8ef9cc380eaaa5aa36fb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE