Behavioral task
behavioral1
Sample
77e59a0a9586b4f3ec1d9a26a3320e9d_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
77e59a0a9586b4f3ec1d9a26a3320e9d_JaffaCakes118
-
Size
140KB
-
MD5
77e59a0a9586b4f3ec1d9a26a3320e9d
-
SHA1
afa89c00f22a3607fed489b89ddde6a0a17fd3b3
-
SHA256
eb9f58fb99d16770e22e7df93cc573929564389c1e14f1250ce8849c22a8ff6b
-
SHA512
fbf8bb4be37f774685d0704d1c1409ef93013d5d96a405fb533e1b1b35de78ef1a97aca7d4ae885196e60b7fdd573fabe60fc757300b109c6172fa9dad550d9e
-
SSDEEP
3072:AXCfj1ZtW/rGbZrfnk+7nGGJWwZcLCuAWKWUtDRDzJ/K5g6ZJ:+CL1iC1jk+7GGJ7OL0Wot1DM+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77e59a0a9586b4f3ec1d9a26a3320e9d_JaffaCakes118
Files
-
77e59a0a9586b4f3ec1d9a26a3320e9d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE