Behavioral task
behavioral1
Sample
36823b7e1b5e22e8ab79a41c0257e954_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
36823b7e1b5e22e8ab79a41c0257e954_JaffaCakes118
-
Size
784KB
-
MD5
36823b7e1b5e22e8ab79a41c0257e954
-
SHA1
0bdfdc762b02777f78aa8e3a4fc857e42f85dd6c
-
SHA256
64dd004e7616281bb21d9ce10e0fe6311f8f32e963275a44d3cf00ac37ba3ead
-
SHA512
17be4d17b9c71a09c58b8e51b352a167a44052a775d760f88182a8bf0983ebf462626e0afd80d70034abf70430b2d02ddcfd10e033edf9fe3de059dd70183f52
-
SSDEEP
24576:XxuyDgjd8hELX0tBhmY62FGpiU3fRJUOu5iMcgt/QT:X5Dq8hELX0tB3gpiQptuR4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36823b7e1b5e22e8ab79a41c0257e954_JaffaCakes118
Files
-
36823b7e1b5e22e8ab79a41c0257e954_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE