Behavioral task
behavioral1
Sample
3ed73f6d33625949780f18b147e61395_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ed73f6d33625949780f18b147e61395_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3ed73f6d33625949780f18b147e61395_JaffaCakes118
-
Size
9KB
-
MD5
3ed73f6d33625949780f18b147e61395
-
SHA1
bf1e08baf7932ba667c5a7434b21e93471777aa7
-
SHA256
b638ea1371d774f69f236794515e1b4b91678bdbc139097a60bed554382b94c8
-
SHA512
56abb48e8ebf8441da94ab0b9400814d26307525b9e9bd6708b29c61b84af89cd10a5308e9d70b89f68297f42991d71a3ab2c9c2cffe05e1e8401a788f011e09
-
SSDEEP
192:Z9ptSdKwI977ubE+C5QvOSqM/4lNRTPYQYMIXvDBVmRyn+Xjh:Zd+IBbCvOhM/4lNREQYLXt5n+Xd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ed73f6d33625949780f18b147e61395_JaffaCakes118
Files
-
3ed73f6d33625949780f18b147e61395_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE