Behavioral task
behavioral1
Sample
b1cbe07d36b2920dc62a1da7647dcdae_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b1cbe07d36b2920dc62a1da7647dcdae_JaffaCakes118
-
Size
151KB
-
MD5
b1cbe07d36b2920dc62a1da7647dcdae
-
SHA1
006f64b0fcefb3d3912cfe2b9afa1575dcca9512
-
SHA256
426c81ac5bdd4a90270481daa5578e814a871e43602ae8f8080213587052e5e6
-
SHA512
174a2e5aec2c3f7cf77c6396d5b09d51a3c5326333d6338a0ec40f98d55274e18669ffa752812f2779f5d489ec4b03fdafebb6e15f8ec50529bd816fe1210845
-
SSDEEP
3072:tnzjTsm29k/PtwNrL59bwBgmKvQqwSnZO+q0BUhVrEwk3w8Fk588bkz0w:xHwm29aPGNt97LZO+dBOr7m45bk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1cbe07d36b2920dc62a1da7647dcdae_JaffaCakes118
Files
-
b1cbe07d36b2920dc62a1da7647dcdae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE