Behavioral task
behavioral1
Sample
136ca9e5c12b70546ad5f2dcc1cd2ecd_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
136ca9e5c12b70546ad5f2dcc1cd2ecd_JaffaCakes118
-
Size
784KB
-
MD5
136ca9e5c12b70546ad5f2dcc1cd2ecd
-
SHA1
15a82db4537c7601b4eea386a6433067b6e735a5
-
SHA256
bddf3a940bd87042634a3883eaaf33b2a53bb8ba38be2a0505ee50216a4ad484
-
SHA512
2683b44393fd41e0c7d51306681c52a7b2bf91ec23c21c9f6d2437411c4f33eaf777346e18bfc40e26eefdb19c2e10c20c44b2cd9f8bb54bcf69dd5c3841cb2c
-
SSDEEP
24576:9m3qyhFpRTW2tt30Q25Hvc9dqP2aJcMTP:9khFpRq2ttTmGd020cM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 136ca9e5c12b70546ad5f2dcc1cd2ecd_JaffaCakes118
Files
-
136ca9e5c12b70546ad5f2dcc1cd2ecd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE