Behavioral task
behavioral1
Sample
436df657b50f0fc5157ea7477cc0e76f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
436df657b50f0fc5157ea7477cc0e76f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
436df657b50f0fc5157ea7477cc0e76f_JaffaCakes118
-
Size
53KB
-
MD5
436df657b50f0fc5157ea7477cc0e76f
-
SHA1
0d57eae7b15dde5ec8458f943b184a9342dbf6e6
-
SHA256
6152df4dae8bdb42e75033bdf4110de4934540586a97c855725511924c27fd68
-
SHA512
cffc02a35c3a797ca26ab99a316be74624052d744e1dbd2fa5efa5ff39fa9c19c0d92c688a7a5965965ddb2cf396c95c95beda9b21a3fcb8ed7f027342798124
-
SSDEEP
768:psGgb6oVOBnjtJAl5YPyFNug7ikFadCO2UUGJ2S8cW4Wnkq0UxhrGBdnHq/84ZqZ:WBVOYVLuqiyLt+8Rnkq0wapbAwh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 436df657b50f0fc5157ea7477cc0e76f_JaffaCakes118
Files
-
436df657b50f0fc5157ea7477cc0e76f_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE