Behavioral task
behavioral1
Sample
b2b6c3dee08591116d8197ba8764ad76_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b2b6c3dee08591116d8197ba8764ad76_JaffaCakes118
-
Size
784KB
-
MD5
b2b6c3dee08591116d8197ba8764ad76
-
SHA1
15894158b3d1b7281b326432fcde9df1495b1f9e
-
SHA256
4b7b79fdc8709c141999032d02fe7c14f4f56c408bc4db9f48a44283c9a10102
-
SHA512
1a30db3f45e139cac9171159366bb698765f3d25e96493f3772313c9244db95cd37356685699ac4544ca0146d10b40e922a18264f61cde88cd394d1a16253d53
-
SSDEEP
24576:K7vCuWdkytQJMbhSCtC0ph2VFfcaUDjXxXGNuA:YvCuWdTQ+CG2VFfcPDjX8N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2b6c3dee08591116d8197ba8764ad76_JaffaCakes118
Files
-
b2b6c3dee08591116d8197ba8764ad76_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE