Behavioral task
behavioral1
Sample
736b9fd57799e513416c2d8091062a39_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
736b9fd57799e513416c2d8091062a39_JaffaCakes118
-
Size
397KB
-
MD5
736b9fd57799e513416c2d8091062a39
-
SHA1
73ff65600a7838935217ff41d9d25aabaaf6e29d
-
SHA256
9b8c7daae6499566fc186efc093e7e37af3518d36235257fd3ebd8be84d9b659
-
SHA512
5083424d7b8b4c8d1d45be84dec846445650e83155021ae89cdf3a5b1c82401d4d3007ad3f94ec9ed86e9cca26d3d64dcf651e960fbb2ae15012e4adf4fe3997
-
SSDEEP
6144:7k4qm/KaC6T9bN3vy8i7qtqydqBVgBXUpnuZXvbpsqGFlyUTm2xf:A9feTBJvEhse5pUb2fDGOf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 736b9fd57799e513416c2d8091062a39_JaffaCakes118
Files
-
736b9fd57799e513416c2d8091062a39_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ultra Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ