Behavioral task
behavioral1
Sample
778a9fa3f77f17ee6f4a9dcd427329e3_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
778a9fa3f77f17ee6f4a9dcd427329e3_JaffaCakes118
-
Size
325KB
-
MD5
778a9fa3f77f17ee6f4a9dcd427329e3
-
SHA1
a3bba1e89c93fa097700858be2f952944591896a
-
SHA256
2cf25567e2425e2e848dfaec9040cd932adf2c4d293e9e6011dcbc670c081b98
-
SHA512
31266a8895a8d6053ee8eeb26be8bd85b5130910342b4f51791354580997b3945b4a46d0dfc460b562e0aecc0701015403481a451fee9babcf3ac126d603fd2b
-
SSDEEP
6144:UpuXGZoCRPCuz9U/h2ypRSa1cACTfgjdeL2:1IrRPCuzG/Vx1kfgjdeL2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 778a9fa3f77f17ee6f4a9dcd427329e3_JaffaCakes118
Files
-
778a9fa3f77f17ee6f4a9dcd427329e3_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE