Behavioral task
behavioral1
Sample
411d77203c6ddf035da01c3061d9ea2a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
411d77203c6ddf035da01c3061d9ea2a_JaffaCakes118
-
Size
784KB
-
MD5
411d77203c6ddf035da01c3061d9ea2a
-
SHA1
b5668c0652a1a453fe801fde3dbbd01e5f81aaa9
-
SHA256
49043ced0162f01ebc8b76d0e81c785951167602bd803745d68d4e4f1e14eb05
-
SHA512
4845897746b348ac9789ef580762598905c0d59d4937092c7354366c8c1332a894d01c9e8f2a3eb8f26e5b98157e64218c3e0d8e206d2d7c038cf537931922a0
-
SSDEEP
24576:otztBjNiQCzN9iCPLC+72dOoPPGycIR+Lp:SzXUQCxX++72nPPKJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 411d77203c6ddf035da01c3061d9ea2a_JaffaCakes118
Files
-
411d77203c6ddf035da01c3061d9ea2a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE