Behavioral task
behavioral1
Sample
b2bae7c83dcbaaf334b4ee72c60609a2_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b2bae7c83dcbaaf334b4ee72c60609a2_JaffaCakes118
-
Size
308KB
-
MD5
b2bae7c83dcbaaf334b4ee72c60609a2
-
SHA1
7cbd01e5afcd32e080228e6fc3e66da7fee43682
-
SHA256
815f52179d98a6ca198cb9c67ec84f5f67e4c39a029d27bed31b557774c3942d
-
SHA512
55e9c63e21bc24ed7e30714c886f5990130c88c3b321d7c29a32b80af9799d9c63787508bd3be0db331bb37b35299885dea437efd6f5074dd4e01019ce365c12
-
SSDEEP
3072:EfP4FGzopTIjywszepfklcg5AwcYjyfOznI9varD9c:EfP7GdzeVkjAvdVAG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2bae7c83dcbaaf334b4ee72c60609a2_JaffaCakes118
Files
-
b2bae7c83dcbaaf334b4ee72c60609a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE