Behavioral task
behavioral1
Sample
77b0e44ea95403a9affe145831bdcfd1_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
77b0e44ea95403a9affe145831bdcfd1_JaffaCakes118
-
Size
186KB
-
MD5
77b0e44ea95403a9affe145831bdcfd1
-
SHA1
ed3d188820e1e2fb81ed28d9148fcedd30c01a1f
-
SHA256
6f0756e9e281e8867a57d1bf21aca2fb49654f8b350793ddb962a7c522be84f6
-
SHA512
bea84bac079f94de610957ed2a2caf774eff20e6ff6a55c7c425cb5346452643627be05bd06446a08d2fa8f541bdc8d2d2dd6c13351d146a263493dae11970fe
-
SSDEEP
3072:U1dTV1m2ToK6VfIVOG2E/FQu8Pzg8qVVaF8OlAy:kdxlkax/muksOP1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 77b0e44ea95403a9affe145831bdcfd1_JaffaCakes118 unpack001/out.upx
Files
-
77b0e44ea95403a9affe145831bdcfd1_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 3KB
IMAGE_SCN_MEM_READ
.xdata Size: - Virtual size: 3KB
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size: