Behavioral task
behavioral1
Sample
3dfbb1e1604c3a43cc1aa61d43beb502_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3dfbb1e1604c3a43cc1aa61d43beb502_JaffaCakes118
-
Size
1.5MB
-
MD5
3dfbb1e1604c3a43cc1aa61d43beb502
-
SHA1
d2f7124d7d8a20d7682fca2f91f688d141275698
-
SHA256
fa1840df5da3e418f70c44f4bfbacff59e4a8866739230630152001bdb096786
-
SHA512
a94efca6324be7f9a1cf377c36f1da6f9bf5c93e01349a14872690b5300519293dbdbea6a1b60302e6684fe99d5f0743f7bfd60fd3db0d0798c5e1d1a18e46ea
-
SSDEEP
24576:fB6+6rHP8adlIfHG1nLeLGLikNLncXsyhK3Ac2:fB6+6rrjOkiALAhVc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dfbb1e1604c3a43cc1aa61d43beb502_JaffaCakes118
Files
-
3dfbb1e1604c3a43cc1aa61d43beb502_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 788KB - Virtual size: 788KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 632KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE