Behavioral task
behavioral1
Sample
377e0f298777912da1811b8f2ba347ae_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
377e0f298777912da1811b8f2ba347ae_JaffaCakes118
-
Size
164KB
-
MD5
377e0f298777912da1811b8f2ba347ae
-
SHA1
255142537e75642efab4638380bc8e3458207ae5
-
SHA256
bd8b60d1c703e8f4d9999c7895fc48ba97694ef8209223bad642167cf5068256
-
SHA512
ed51e122d3398083ef9bffac96755f569a6c0e5fc778a2cea73b4bebe3e9acdc4ed27b3f20a4a5f4283bf2e8073f48881b9566d9d9d7ec392ba762d99332f8af
-
SSDEEP
3072:dzoQLlTcbqhOSmdZqMTYw+PEgsEwvx4nBbIn4//hTBf475:doQtWPZqMqPEgsEwv34//hTBg75
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 377e0f298777912da1811b8f2ba347ae_JaffaCakes118
Files
-
377e0f298777912da1811b8f2ba347ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE