Behavioral task
behavioral1
Sample
3d2abfaa8956bc0d83681940a33f342a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3d2abfaa8956bc0d83681940a33f342a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3d2abfaa8956bc0d83681940a33f342a_JaffaCakes118
-
Size
5KB
-
MD5
3d2abfaa8956bc0d83681940a33f342a
-
SHA1
d7749c0f8dd496e5c0999803f53017c76b32b045
-
SHA256
63d6f48a0c6eb19c87313f7b7f5d74a8cd5741e01071dea57fc6cd1b5de5ad80
-
SHA512
6aa5f3a0a6ad8dc5cc9931806a9dfee457c2e0d28f3f20ad953152e8a572cac2215d3ae0d6fca6b6e9da605eba4e76133cf3418325216f1abb97813fc51c7d1d
-
SSDEEP
96:FpG4MZwFrBmTG2CQ5geEkQ1dVD1qlFWcPyNHBN+5rw6/iVv:fCs52z5geEkQ1LBqjaxBc5kBV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d2abfaa8956bc0d83681940a33f342a_JaffaCakes118
Files
-
3d2abfaa8956bc0d83681940a33f342a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE