Behavioral task
behavioral1
Sample
036e58a0a3146529023693168e7907a6_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
036e58a0a3146529023693168e7907a6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
036e58a0a3146529023693168e7907a6_JaffaCakes118
-
Size
834KB
-
MD5
036e58a0a3146529023693168e7907a6
-
SHA1
d9231486239b5308ea6d66dfa955348efbb0c99d
-
SHA256
b9cc3708fe9c086565408e3b18e1f415f677e5ecdbac4c406a01d964808b34f1
-
SHA512
d21d0d25191837cb1c8601b90849d14891a3f04e65cb3d350a389001d1fe4a2b04e67b81845c1164ed5b728d444a56b0595bce523ac7a9dc0f7c28981e46b723
-
SSDEEP
12288:p1b67mvWS9jrYpvzlMysDiLGiiqPnayeg5tQ:5WSBrwLlMKiWnd3Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 036e58a0a3146529023693168e7907a6_JaffaCakes118
Files
-
036e58a0a3146529023693168e7907a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE