Behavioral task
behavioral1
Sample
436b474e8b54333afb0bc56be97eb67b_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
436b474e8b54333afb0bc56be97eb67b_JaffaCakes118
-
Size
133KB
-
MD5
436b474e8b54333afb0bc56be97eb67b
-
SHA1
29e0c4d199abb44c191087faefa9fbbdc677d457
-
SHA256
88e34057ab9b5e240f9abf386095c11728a8a04bb772f624be1bdfa8e9c9d209
-
SHA512
b268ec7b1a1c896d48729d874564c25a61f72e26c2e2238fa7a3e38cda6710246cd3d6a84cc60a54a816802678ba01cb8216ff907179c6c617d82648f74062ae
-
SSDEEP
3072:WEdeLOEyGPWA71FdekVZbDd21SwTQhPbh709maD0AVQ:WEdeLOEyGPCkbQlchjZ09maD5VQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 436b474e8b54333afb0bc56be97eb67b_JaffaCakes118
Files
-
436b474e8b54333afb0bc56be97eb67b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE