Behavioral task
behavioral1
Sample
877b422c21b3575a17be9ba5c614ee7d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
877b422c21b3575a17be9ba5c614ee7d_JaffaCakes118
-
Size
784KB
-
MD5
877b422c21b3575a17be9ba5c614ee7d
-
SHA1
877f65af839f38a636a68b442ce3af1f891affde
-
SHA256
9202fdb7aba6ef668382196ac9bc43e0ee38db8a72f9cafad100cea40dda9ad3
-
SHA512
a8f4e55906b1d36779d97e45891d64938d9bd9a70531a7b532e438d20e94aa12cc91e785341fa589ef24d8998772aaec2d603f83fe4f82ae2a90d020ea585d53
-
SSDEEP
24576:DljbTQmqV3rcETSMMN1hOjgVvc2djwn6YFV6g7WiF:DKhrclMMJRv46wiiF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 877b422c21b3575a17be9ba5c614ee7d_JaffaCakes118
Files
-
877b422c21b3575a17be9ba5c614ee7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE