Behavioral task
behavioral1
Sample
3e8a1ce5188f88307cc7982998eec4bc_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
3e8a1ce5188f88307cc7982998eec4bc_JaffaCakes118
-
Size
101KB
-
MD5
3e8a1ce5188f88307cc7982998eec4bc
-
SHA1
c57268ce21861e6c8d36131654d0ad0aeb91955e
-
SHA256
ac729feb2b6db3fba6275f46935a95cec200edc5fb256b15581de88bc191d1c0
-
SHA512
4e346228fa4d99dd0901ecb452eafb097cdf42736830ea1cda4657e95af36f46e703d8f86b853a9a7df644dcaef739c2e32ae97f54cc06831a5b543f7a937735
-
SSDEEP
1536:SLEVlpnouy8H+YnK2kkf9AeL08AQUvRZsSYUmm1h/vdcYOv9gtPWqWp6zHxp6zHO:bz5outHjAkff/4ZIqIvrIyy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e8a1ce5188f88307cc7982998eec4bc_JaffaCakes118
Files
-
3e8a1ce5188f88307cc7982998eec4bc_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE