Behavioral task
behavioral1
Sample
36132664e9db34dd84b7436fe02016b2_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
36132664e9db34dd84b7436fe02016b2_JaffaCakes118
-
Size
229KB
-
MD5
36132664e9db34dd84b7436fe02016b2
-
SHA1
964239b095ebae4f80e8a93815be1c0d1192ba8b
-
SHA256
967ea57d4575a8ac5bc52a73ee4a7e743282655e218ef124e99be7db56cf6ebb
-
SHA512
d9280191456980e09ba5236edc978fd0d069012d15b56e88d144ffd7f4c291b94bb25e201f5c301236f08834c8244fe46b9465b4846e4dab49a908aeafbe30bc
-
SSDEEP
3072:4eyMPsEA4KzMWOBImM9uCu9i7kWgIwYYWQRJNjirveLd0mjoutj:VsEA4KzMWOBI19uCu9i7kWgZjoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36132664e9db34dd84b7436fe02016b2_JaffaCakes118
Files
-
36132664e9db34dd84b7436fe02016b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
���� Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
즹�� Size: 4KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE