Behavioral task
behavioral1
Sample
636b90928c5dcf7d93670cd23f2ce637_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
636b90928c5dcf7d93670cd23f2ce637_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
636b90928c5dcf7d93670cd23f2ce637_JaffaCakes118
-
Size
15KB
-
MD5
636b90928c5dcf7d93670cd23f2ce637
-
SHA1
78a5ade15368fb43b08b80489695f92fd5b5d3f7
-
SHA256
d01944c893f48d7957325eda8c6f91faec015b9fcbaf98a71666920c723c79e3
-
SHA512
65e0cb51ac41843dc9c425650349efc0eb4deaba6e6d64457ce7767e821b03da20803198554f2c8a37e67c6ce98dfaaec8be066e345ca48777c846c1045b77dc
-
SSDEEP
384:2dV8dJXatyij8UsTpWztM1DN+kIyqYwEntVF3J:2dVaJKtyiYLTpl1DN7tP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 636b90928c5dcf7d93670cd23f2ce637_JaffaCakes118
Files
-
636b90928c5dcf7d93670cd23f2ce637_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE