Behavioral task
behavioral1
Sample
778eed51e8a5dcddbc71f69cae4cb0aa_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
778eed51e8a5dcddbc71f69cae4cb0aa_JaffaCakes118
-
Size
348KB
-
MD5
778eed51e8a5dcddbc71f69cae4cb0aa
-
SHA1
97bacd79b0fa686c3d881b9972155f27c28fafd2
-
SHA256
914b9acf079fa67d5b67f24ba7d2197906848e834b491b4a804666f70d289ecb
-
SHA512
24a4cebba891126f9b61b9426e226f8f4807d4388f3f995b5afd1441ec271ef91eefeee23a2b3ec89d7320d943d2df30e1d6b3af5f29cab68e29c465bfd3b6f9
-
SSDEEP
6144:lAk4qmYJwW1aFDvX68Krq96yd6ZHyq13jglrzXn0iB:x97AFjXkxsmdzyx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 778eed51e8a5dcddbc71f69cae4cb0aa_JaffaCakes118
Files
-
778eed51e8a5dcddbc71f69cae4cb0aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE