Behavioral task
behavioral1
Sample
3e6806ea2a5b61b9a3013bae2978e4f0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3e6806ea2a5b61b9a3013bae2978e4f0_JaffaCakes118
-
Size
568KB
-
MD5
3e6806ea2a5b61b9a3013bae2978e4f0
-
SHA1
1c74b138fe1ca0a5afd93f9c478d34fe20e6f4c2
-
SHA256
70fd4dd0d5212d940eead1e4c45a01dd55318ae708a525797e847ae8c24ddde2
-
SHA512
512654b8e9aaf364ebfc8ad7c53cb5b7336f347fd63e3f68caae55e598924aa29b60d675b86b2b9371c5a8ae9ddada79d369b0872d2c1a9a6b249b2dac5e6622
-
SSDEEP
6144:v3Wn+8upeA2tXHhjylYHlWtY5IZX5ufNnjlqtCh0SKjGF9/eQsBBTm0CJcV:2DusDtXH4YFqX5uVnjlqs0SK2AQoS0u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e6806ea2a5b61b9a3013bae2978e4f0_JaffaCakes118
Files
-
3e6806ea2a5b61b9a3013bae2978e4f0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE