Behavioral task
behavioral1
Sample
177c42bf43b94138d6d0972ab01376ce_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
177c42bf43b94138d6d0972ab01376ce_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
177c42bf43b94138d6d0972ab01376ce_JaffaCakes118
-
Size
237KB
-
MD5
177c42bf43b94138d6d0972ab01376ce
-
SHA1
7212a72290650e9b0521f294b2d2bd431b2c1a3f
-
SHA256
174df84650c39c7297d9fdc7e363a2dbe6e4bea4d6904a2787860c9b14cd6fcd
-
SHA512
4d4afc220669395e2cde91ae2b7b3a53f404063a8b8e517d70c24700f2a123c0bbb7b2564a37debc07fb9b3add3aa6565323fa03ae0d1885058be5db2723d6f4
-
SSDEEP
6144:DZ6YZ/SbwVVWa9P1s1bjm1L2GndMLvb2fiE4aivIs:DZ6YMbwVMah1Ojm1L2GdM2fiE4aQIs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 177c42bf43b94138d6d0972ab01376ce_JaffaCakes118
Files
-
177c42bf43b94138d6d0972ab01376ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 720KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE