Behavioral task
behavioral1
Sample
b.exe
Resource
win7-20240705-en
General
-
Target
7620a5efbc4f3bac5a53b7b019d576f4_JaffaCakes118
-
Size
340KB
-
MD5
7620a5efbc4f3bac5a53b7b019d576f4
-
SHA1
593e2421a9e7e6a3288ef817bfc55a86b8646918
-
SHA256
53cfee158e669fedd982ae5ff0fa79345dcf268917392fb0d3b41c10db2bfdf9
-
SHA512
55b8da5ab10d6300956b9458c40defe34a9c9da615be6ee5a407d04a10203ed6b9236b4f7405025efca1a182843be3a32dcd65b982b9aebe1b76823fcad90834
-
SSDEEP
6144:1j/45YGH0EEc4FxwGSJu0pT5ZhhLGEV3wCcoUWEj0jkRATFiCFYvh83LCPbRCPj6:1A5YGH0EPGSJzqERwIjkRbnbE8f
Malware Config
Signatures
-
resource yara_rule static1/unpack001/b.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b.exe
Files
-
7620a5efbc4f3bac5a53b7b019d576f4_JaffaCakes118.rar
-
b.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 760KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 268KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BUPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE