Behavioral task
behavioral1
Sample
b36845d2383ec5313c3bd689e672062a_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
b36845d2383ec5313c3bd689e672062a_JaffaCakes118
-
Size
151KB
-
MD5
b36845d2383ec5313c3bd689e672062a
-
SHA1
9ab40be695223314196e3e0b238b8e61a15b90fe
-
SHA256
47dc19fc337d5748069cb3486f78f06cc21ac798a16046fbbb853412c0585f1e
-
SHA512
9d8c6b9c4d0b873b4f619e85ae6af74ec8966a2584e52eb5aff8e7e51b66630aab854714ebbe1e6c5f4eb3656e279894dbce67a8f609ae27ea3bace8ec4c40f9
-
SSDEEP
1536:/qF0aR+a8k9tmz20BtkacQ+euksF1lLdhDZ:bzetm6gtkh1euPFjLd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b36845d2383ec5313c3bd689e672062a_JaffaCakes118
Files
-
b36845d2383ec5313c3bd689e672062a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE