Behavioral task
behavioral1
Sample
c77af4b7a1a2b4dd5b1c17819a400d8b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c77af4b7a1a2b4dd5b1c17819a400d8b_JaffaCakes118
-
Size
4.7MB
-
MD5
c77af4b7a1a2b4dd5b1c17819a400d8b
-
SHA1
41e45b2a23920cc67d6df1f8a12c5e58a35175a0
-
SHA256
e5730812a5e79dcbc3ac6b4a66f4652868f3ea5430b8dee63c0a8d7155f3db05
-
SHA512
c29387c5713cae5ae0f9f580de4a64a6c8bf707e4c7d3500128a7c816ec853c14538d0d25930f0ea170702293e1840c6d89dd6ddc0e295de5f6f5a14745baaeb
-
SSDEEP
98304:Tl88udp4A2evUNGnVuUwGLVWy0/OQmjmUah6rpHD6:yzDiNyiXfGDvg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c77af4b7a1a2b4dd5b1c17819a400d8b_JaffaCakes118
Files
-
c77af4b7a1a2b4dd5b1c17819a400d8b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE