Behavioral task
behavioral1
Sample
36f7e45da5a5ae75c0a33e432b3be972_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
36f7e45da5a5ae75c0a33e432b3be972_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
36f7e45da5a5ae75c0a33e432b3be972_JaffaCakes118
-
Size
449KB
-
MD5
36f7e45da5a5ae75c0a33e432b3be972
-
SHA1
1fef07b9e86239f2498f7906fb09f91c61ef3cf4
-
SHA256
61b96fe6073ca5d9a2f4a07c4765ff749aa5bcc1eefe570dc1eced1c3af377e2
-
SHA512
42541e58de1fd789d0cf3c18dadc13a53e76dd5394d01f1740b34ef07a4d4b5b11668be8ccc0a0cc19c691c883906d0b7f6fadafecbc515954551040b8f5bb56
-
SSDEEP
12288:ZZgJpAIUYkFrrlYWDxhRCIwYeatMR9CUuRq:ZykBemrRCIwYe8MR93uo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36f7e45da5a5ae75c0a33e432b3be972_JaffaCakes118
Files
-
36f7e45da5a5ae75c0a33e432b3be972_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE