Behavioral task
behavioral1
Sample
c77a89c4b6d3032e8a389824ca26a2a4_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c77a89c4b6d3032e8a389824ca26a2a4_JaffaCakes118
-
Size
327KB
-
MD5
c77a89c4b6d3032e8a389824ca26a2a4
-
SHA1
f6cf63d916bce94a378488779b8ad763fa8e9ebe
-
SHA256
0034a78ca640f8f3128ab00655328ed82c2f688ec585acd192299b76db06cc29
-
SHA512
8fefaef4ff26841ab4f1f7e7ab71eb850f16cdefae52cd028aacf6d1bac4339aa87524a3d6c23cd15bc5fb1ced7ae9c2f8a305417dccad1793df0e2d333b03dd
-
SSDEEP
3072:iLQo7P8ngioaxp0V08fTpShkyvHQqsP68rqyjSKD6T2iNout6b:noYngPaUHfXqs7/76TFNoSO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c77a89c4b6d3032e8a389824ca26a2a4_JaffaCakes118
Files
-
c77a89c4b6d3032e8a389824ca26a2a4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE