Behavioral task
behavioral1
Sample
136c7c149deb1818e8ee9ce60d0af60e_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
136c7c149deb1818e8ee9ce60d0af60e_JaffaCakes118
-
Size
22KB
-
MD5
136c7c149deb1818e8ee9ce60d0af60e
-
SHA1
94a132131bf55a6a6647494e126f3267384d32c5
-
SHA256
e6ed3540c5acd6dc6607c4b85512a474fa22ce11774ab5093bae6f5639c802eb
-
SHA512
d6868d26cda725b2b873fb38aaf981f2d17e0747b88441fa1dda82dd580afe5063dd714a523770dd25161a37758b5307b8f03cf5a8517f4093e89dd161c6242b
-
SSDEEP
384:mYT3Gn/20RwkNmoFCiH59T1dPPVw8kGJimZn9xxPR:NTI/7Rwk9FVHfj9w8keimZ9T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 136c7c149deb1818e8ee9ce60d0af60e_JaffaCakes118
Files
-
136c7c149deb1818e8ee9ce60d0af60e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE