Behavioral task
behavioral1
Sample
3e7100718104b27e48ad1d029d424d4c_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
3e7100718104b27e48ad1d029d424d4c_JaffaCakes118
-
Size
2KB
-
MD5
3e7100718104b27e48ad1d029d424d4c
-
SHA1
aca388957202d3edc635fb42062ee498fbb6d128
-
SHA256
a19e4d555b71e0f3adba30970894f4de2146269ac5702265fb66b6e947901889
-
SHA512
a26898dcd32981a43739cf6fc3efd0292a7b21ecbf7ed3e42b0bd00b96b94589d302bb933744c4b15cd95c4d2aa8663a2d792ee58dcf383c1226ffe4f6c92e25
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e7100718104b27e48ad1d029d424d4c_JaffaCakes118
Files
-
3e7100718104b27e48ad1d029d424d4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 655B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tqn Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE