Behavioral task
behavioral1
Sample
777c8426cc11f68d5b1167ccf3558274_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
777c8426cc11f68d5b1167ccf3558274_JaffaCakes118
-
Size
123KB
-
MD5
777c8426cc11f68d5b1167ccf3558274
-
SHA1
a8e52119b82a23a97a046649d908b302413fc0b5
-
SHA256
1f91f8908b0e6e2c54f981ed9b2ba21afd4a12909b6a96030015421dfcb76cbd
-
SHA512
aeab8b50cd43c298b9457b9dbd285cfa899b788c50171af90fc38064c4084f15191341a1d6476e3fbc6854c07620788340474727498cbaecba6e9e64bc5c2ead
-
SSDEEP
3072:ueSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLINC0B:uVYrJrOSsRwcpCNfB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 777c8426cc11f68d5b1167ccf3558274_JaffaCakes118
Files
-
777c8426cc11f68d5b1167ccf3558274_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 62B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ