Behavioral task
behavioral1
Sample
3ef3fa63a72303a9ca53f4fdd26c3af1_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3ef3fa63a72303a9ca53f4fdd26c3af1_JaffaCakes118
-
Size
1.6MB
-
MD5
3ef3fa63a72303a9ca53f4fdd26c3af1
-
SHA1
8c8883c190ceff0e3e4004e91387065c77f7fff8
-
SHA256
c157ecccfe260d991d0a1d1d08b667a26b73528a1556310d4240386f032e1760
-
SHA512
668fd841390b004a480ff69ccf3272163e5c4c56df81798ed5ed1d4ff289e5b2fe9faf111999bb37a0ada2e0289b3d1e7beb4ce4e6ec622a52e83af72951844d
-
SSDEEP
12288:lAIC0DjUGXlV9Fi8MRtFcRgAaDH4q1peXK/0imKTP4pZw/Wh4NPdqqHlBoRQ9Ibp:l5pXn948MXFn4QpehMeZweh+Pdqe7eb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ef3fa63a72303a9ca53f4fdd26c3af1_JaffaCakes118
Files
-
3ef3fa63a72303a9ca53f4fdd26c3af1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 366KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE