Behavioral task
behavioral1
Sample
4b977a5a1557746644b8a591c0e37323_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
4b977a5a1557746644b8a591c0e37323_JaffaCakes118
-
Size
3.8MB
-
MD5
4b977a5a1557746644b8a591c0e37323
-
SHA1
8ad8c1053bcc49b1fa99ca10c8d2346fa479ef07
-
SHA256
263593613f72a6e348d2a9364a627f2600891ee5662453ce58cbe8838dd2f42b
-
SHA512
82aeb6c6eed3a001983a24b449d983db12afb1b5173f30c3aba396f077c4538b3df74f42258c1dea2043dee8c58fd75b02a9b26787e562c52a5619966bddf08b
-
SSDEEP
98304:I4q9bQOZ3PuO7aw7M8gntVViOF/+G1ixCsKQDYTqDle6y23St:C9dMyDKiOB+Zx1xYTqDlee
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b977a5a1557746644b8a591c0e37323_JaffaCakes118
Files
-
4b977a5a1557746644b8a591c0e37323_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE