Behavioral task
behavioral1
Sample
3fded70e19a927d2189561149a95b989_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3fded70e19a927d2189561149a95b989_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3fded70e19a927d2189561149a95b989_JaffaCakes118
-
Size
635KB
-
MD5
3fded70e19a927d2189561149a95b989
-
SHA1
ad9172d195c97c4395c964eaa35ec0b3cdea6fbe
-
SHA256
e9eccd3811436aba2aeacb7313057caa82754e75611cc2048eda39068339161f
-
SHA512
c5079c78bdd3333a49647273d0d633a521d25f51f85399406eb33e3c9e9ae84f02f7b53a0978b624de2ea8d95a0651a64efd9a317621703764fc1222c207e633
-
SSDEEP
12288:77OkHuhnW0LHyRLqiVEa8TwmlFvGIaajzKQq9p:77/OdHyRLqivaTqzeKQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fded70e19a927d2189561149a95b989_JaffaCakes118
Files
-
3fded70e19a927d2189561149a95b989_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 388KB - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 236KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE