Behavioral task
behavioral1
Sample
36821d32007d4eea691e466a1f276797_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36821d32007d4eea691e466a1f276797_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36821d32007d4eea691e466a1f276797_JaffaCakes118
-
Size
253KB
-
MD5
36821d32007d4eea691e466a1f276797
-
SHA1
8fa8bf1cd655cc800c96521aa46771d8ffa671a5
-
SHA256
e48363af6de6f38ffcf91e0496044277ef79a182a0a249880db2df82572d0169
-
SHA512
7d383c556569092522bed28db5aaf15b9cf7be816a35cc8f325fa737d7a153c23a6eae4142525e97f2fed53245e72373a7f0415b46c34e32a06b68a71dc2db77
-
SSDEEP
6144:dFhzYpBTL8DFneBLwQHUUj6BvVAcqYLKxmwPbiF5kisJihpoS:hSLviFUmBvVAkLKAwPbutpoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36821d32007d4eea691e466a1f276797_JaffaCakes118
Files
-
36821d32007d4eea691e466a1f276797_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 520KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 246KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE