Behavioral task
behavioral1
Sample
37e31f9a1838197c4e04ebe0f9edf36a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
37e31f9a1838197c4e04ebe0f9edf36a_JaffaCakes118
-
Size
784KB
-
MD5
37e31f9a1838197c4e04ebe0f9edf36a
-
SHA1
510d339dadaf7296315b1b296826d800feca44c3
-
SHA256
6df4687ae85f6ea3becd1bfb0a5b298fb47fbe241f5f4edd61790a3e69959337
-
SHA512
60ab3a186b2a651f62a70f421e7d561388601f51bff95ac219715d5455b7902e43f19c09701c034a7dc47f60ea5c4ae98f48942f7be2966ed5b2f25a951fce58
-
SSDEEP
24576:0nnR5vU4vsoAuL4ak4YUnCPwdCAREaASw7OxKf:0nfvU4vsoAK4ak4hCoddEtSc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37e31f9a1838197c4e04ebe0f9edf36a_JaffaCakes118
Files
-
37e31f9a1838197c4e04ebe0f9edf36a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE