Behavioral task
behavioral1
Sample
3fc5cc2ff9e4a8546a0699a52381e3b1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3fc5cc2ff9e4a8546a0699a52381e3b1_JaffaCakes118
-
Size
133KB
-
MD5
3fc5cc2ff9e4a8546a0699a52381e3b1
-
SHA1
2da1e6f3692be56eb9aafd9b79ffdf173aff75b4
-
SHA256
b2497dbffc7792ab2e98dc55696f1e0a27d157dc5e77b3aef31dc9cbc1901c46
-
SHA512
a677b85c6200e1539a58217bd2013b8b0c942408adefc3a4b6bcb46d4d0ec5e526c47f3c2eda11ce19ac015a603a8c899cf4016b3ab2b140dd3a8ef051763853
-
SSDEEP
3072:Co0Z1DNvTR8C0hiYcLZ99Nfr3jWQtRPrZUDtac/RQ/6k9oz9a7spjtXOQ:Co0Z1DNdIyN/ljryJacpXeo5aQtXOQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fc5cc2ff9e4a8546a0699a52381e3b1_JaffaCakes118
Files
-
3fc5cc2ff9e4a8546a0699a52381e3b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE