Behavioral task
behavioral1
Sample
36a9fe5d7a61dda376b6c4d81d9ec254_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
36a9fe5d7a61dda376b6c4d81d9ec254_JaffaCakes118
-
Size
88KB
-
MD5
36a9fe5d7a61dda376b6c4d81d9ec254
-
SHA1
14918c6245e4c7b0518a39925d87582616363e2b
-
SHA256
e72a65e916ebd7db56211e7c0805aaf1e5dc43b46d20d177320ab9b073944e6c
-
SHA512
db5e477446c6c9c0f1cc8ab4423b9aca5309857d1561bddc81f4cbfd2d3768cbbf691717938a93274109b2692c85805e1644578ddfdb247109dffa5e2182f853
-
SSDEEP
1536:5NLT08dr296UI6DVytB2QHa+/+gLatq/z:DTD09xTq6+/+zA/z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36a9fe5d7a61dda376b6c4d81d9ec254_JaffaCakes118
Files
-
36a9fe5d7a61dda376b6c4d81d9ec254_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE