Behavioral task
behavioral1
Sample
536fcafd77ed6a8e7058085de3a232ff_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
536fcafd77ed6a8e7058085de3a232ff_JaffaCakes118
-
Size
745KB
-
MD5
536fcafd77ed6a8e7058085de3a232ff
-
SHA1
fc55c6337d9b14cfb2de8b5511a0e7fa9dd5e1dd
-
SHA256
c171c35521624cdda3c9fbece4d884b0a022a6bbf6d251c456d359f1a396b172
-
SHA512
86df7ca6804eb1bd2218021fd2868675d3072d15b6f571e5c87af341773a8b6c236059a82ac0dc29cf0d41e6a1c02d8698315dc2beac5e9df2f8af534f0754c1
-
SSDEEP
12288:ibv2CKLWdNo/x/BECs2fAyNfHk/TdCgRJ9dmeZqxCf:a2CKydS5BECs2fAyNWdmeZq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 536fcafd77ed6a8e7058085de3a232ff_JaffaCakes118
Files
-
536fcafd77ed6a8e7058085de3a232ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 500KB - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE