Behavioral task
behavioral1
Sample
536a0c067a0cc69db070fb4a17e79513_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
536a0c067a0cc69db070fb4a17e79513_JaffaCakes118
-
Size
346KB
-
MD5
536a0c067a0cc69db070fb4a17e79513
-
SHA1
ecf26e56b58a0d7d2a793b9583c73b57a20d5369
-
SHA256
6982d68ca0650f41eb6c8834855ae9722befb548d492f67d9c1689d13f1a2012
-
SHA512
d9666c809966e32cc5af4f1ec9681369824d0fc18ec85db92af11055814956fe23adc315960ac0eee9c31f46a081f915460a3cc94b20b0ff776091c70350d9d9
-
SSDEEP
6144:w/YWVwLXU2Fnewd+J42KOq5+TeDypKtWboIh1RnXMoSEjZSU+j540K:gYWVwjU2Fn7kLK35yeQvboIhT8oSE4tg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 536a0c067a0cc69db070fb4a17e79513_JaffaCakes118
Files
-
536a0c067a0cc69db070fb4a17e79513_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 460KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE