Behavioral task
behavioral1
Sample
77e60eee8ae66a94c1f4205bee2699c5_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
77e60eee8ae66a94c1f4205bee2699c5_JaffaCakes118
-
Size
17KB
-
MD5
77e60eee8ae66a94c1f4205bee2699c5
-
SHA1
3d3605c7db6c56bbce8f29fec42bc153df4eec8f
-
SHA256
0e199e9a1bf5e34904341b5d6f5794d09343a2d0331ce17573f64340e9385fdc
-
SHA512
32e19690a2e8bc8968791e31cc16af374ebf53f21e7c863de091cbdbae0bdb80575d5f5d3362283d5986101671abf12c688606d94ddf6dd47859a09279827c59
-
SSDEEP
384:Z93q7m/006fdmo4SKOpsviAysG+FpWKvkYIRqocwF2zBN:7q7h06BTKOpK5y/+FpWeJQqoT2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77e60eee8ae66a94c1f4205bee2699c5_JaffaCakes118
Files
-
77e60eee8ae66a94c1f4205bee2699c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
8a91beae9750b718534bbe623015062e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
advapi32
RegCloseKey
msvcrt
_iob
shell32
ShellExecuteA
wsock32
bind
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE