Behavioral task
behavioral1
Sample
36c4552051a1510077120e9962c7f1d3_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
36c4552051a1510077120e9962c7f1d3_JaffaCakes118
-
Size
12KB
-
MD5
36c4552051a1510077120e9962c7f1d3
-
SHA1
32320a7a621dbc63b67acd484d650cff50ca1357
-
SHA256
5995ef0ba73ada4e08004c4486124748fbbd39595604632146740aae38d9a672
-
SHA512
433f3d8892f2fa7e4c10626ec01e07e4a40e5ed912f99e2283591f4c9a9a1e8ca58e120a511b3d517144723411c4a55218d01102b4269ddbbe677c1a6517af64
-
SSDEEP
192:t+4uzYN1JG4G4UPCQL7V64IN9cd1aQqxtbXpwno5Y0meq:t+4kYNJUv4N2aDb5+mLmeq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 36c4552051a1510077120e9962c7f1d3_JaffaCakes118 unpack001/out.upx
Files
-
36c4552051a1510077120e9962c7f1d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ