Behavioral task
behavioral1
Sample
77e49b9accc384242cb4cbb057d165ce_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
77e49b9accc384242cb4cbb057d165ce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
77e49b9accc384242cb4cbb057d165ce_JaffaCakes118
-
Size
152KB
-
MD5
77e49b9accc384242cb4cbb057d165ce
-
SHA1
3b8cf79f88ab35b8c79a0a5e92a777ecd5c84415
-
SHA256
7238b1d087a9a8593067b276064fa215388b6a6610487362b73ba5bc6fbd834b
-
SHA512
ea77f03ff413bac581a67f4446431028905387bd5dd7f7d83ba1eb1ca3f9a8cd181a2d68570a198755616d3a8eb5c5c15bc9231dcbdce3ef6992014ab84d17d2
-
SSDEEP
3072:eWrGIUEZb7y12W0QTpai2N55xVdpAJVpCIYENkqS4J8yTcJout:xrUEZb75W0wULN55xVdpCrRSqptTCoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77e49b9accc384242cb4cbb057d165ce_JaffaCakes118
Files
-
77e49b9accc384242cb4cbb057d165ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE