Behavioral task
behavioral1
Sample
2636ca6ea1ed9e96a365f356e11e5b60_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
2636ca6ea1ed9e96a365f356e11e5b60_JaffaCakes118
-
Size
379KB
-
MD5
2636ca6ea1ed9e96a365f356e11e5b60
-
SHA1
fe5241d41f9d74fb82443174902bda5a7070b1ff
-
SHA256
42e1758faa3bd07b59f46c825d01947d98e8e5295eb7c194a076f42c99d11f02
-
SHA512
98053e7dbe4c85ec3b4e60f245fca2c3a4cd0e737d246d789441092bd462b55976f8706909b2c740346cfda5aac2e77490b60fc8ea41ba1e80558c7054005a8c
-
SSDEEP
6144:5+qn/00gA1pJzXsWuTHgU9xGJRKeOGDykNwS1F8kqslg92YAoS0LE1:ls03z8tgkGJRxpw4osO2JoS0LE1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2636ca6ea1ed9e96a365f356e11e5b60_JaffaCakes118
Files
-
2636ca6ea1ed9e96a365f356e11e5b60_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 880KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 305KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE