Behavioral task
behavioral1
Sample
36d735e6fbba8d1de04da20905533173_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36d735e6fbba8d1de04da20905533173_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36d735e6fbba8d1de04da20905533173_JaffaCakes118
-
Size
84KB
-
MD5
36d735e6fbba8d1de04da20905533173
-
SHA1
4a035359af8f254a4dc56e9b9f50aa613abdf32f
-
SHA256
e87625ebd89da40e95b94746ac9ee56a2e2c4a600385abf1cac47148af18599e
-
SHA512
eab63c514a78c2b4f0225035a177b79e1de666c5bbcb54cf1a4cbde90563cfab7f09697eafcee0717ba56b78404faf78a124a08e502681d6be3dd6b01d1cdf5d
-
SSDEEP
1536:egKcR4mjD9r82LpU0cXn3QcJmz/gpEs6AmHf8+2XToDPBm0Enk1lz:5KcWmjRrzLpcXgc1AlHf8foE0/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 36d735e6fbba8d1de04da20905533173_JaffaCakes118 unpack001/out.upx
Files
-
36d735e6fbba8d1de04da20905533173_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ