Behavioral task
behavioral1
Sample
3e14557755ac9684ca0f68159db9a2ae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e14557755ac9684ca0f68159db9a2ae_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3e14557755ac9684ca0f68159db9a2ae_JaffaCakes118
-
Size
8KB
-
MD5
3e14557755ac9684ca0f68159db9a2ae
-
SHA1
08a5a185a757375d66358a20c69a4dd955cde35c
-
SHA256
65482e3ca4bf283dd161719ef7404e835ceb93c2279dba16c7e584f9235ecfa4
-
SHA512
02795bd626b5313a1c6a71e3fae1d1bfd80adbb5fc92ce6d525b2f1a8b3f73530b95bdb0831f6e3293106e9be6a5a73bfdf2da821a1be08c748a68da56cf9d9e
-
SSDEEP
192:jiqH8KwPOGa1sWkd1nqS8vHfj8oSYBBxsj7u7G:r8QD1Nk7nqSMHfbB6u7G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e14557755ac9684ca0f68159db9a2ae_JaffaCakes118
Files
-
3e14557755ac9684ca0f68159db9a2ae_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE