Behavioral task
behavioral1
Sample
36a587755a3a022e52762f015c7214f1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
36a587755a3a022e52762f015c7214f1_JaffaCakes118
-
Size
104KB
-
MD5
36a587755a3a022e52762f015c7214f1
-
SHA1
31fc96b79756251d698ef459a373246652cab99d
-
SHA256
7d0682a9457758e66352f38dae1772f1bc9ff56dd946a5f987f05cf2b69ca79b
-
SHA512
1e382afd9db9800dbf3757b916e772138e275e9662d60b1c93356a7af76f1627cefba2bd8c75725a7770bd2998953365f3cf5b3f42e07e7fe751577b210cf6cf
-
SSDEEP
1536:6l5Jds/+j5qFTs3tZybhUrwC6Wpo3ElTnKie7kEk5Itr5nXIj8OwN0Vw/mnasixq:6DVjssdZghGeEB0uI958wNh+a5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36a587755a3a022e52762f015c7214f1_JaffaCakes118
Files
-
36a587755a3a022e52762f015c7214f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 560KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NUPX1 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE