Behavioral task
behavioral1
Sample
b2e00c7822d111bb6879b67593340171_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b2e00c7822d111bb6879b67593340171_JaffaCakes118
-
Size
223KB
-
MD5
b2e00c7822d111bb6879b67593340171
-
SHA1
b3a24d6598123557b7e9a2276f866056c2317de5
-
SHA256
b2c1a538b4b3787fc3c04cc4f39f2044496c024bdd39a25ddb648d3d8eba5e38
-
SHA512
71f458a6eeed8c2aba83397a128c519d130dcf735b5422c00b7ee4c2c67d0504774109b209bfb3ea244a7ab18bf62855fa76f1842f96b5a88217d6ba141d8de9
-
SSDEEP
3072:MDs8+3CnO+eeGYrOmukDnVNjgeaWY+AgPIMVtA4WkGiv46+Ih8iNaN7ycpMuKKYB:P8GC/eGpus/ZYXt4oy4Pg8N3aKYjN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2e00c7822d111bb6879b67593340171_JaffaCakes118
Files
-
b2e00c7822d111bb6879b67593340171_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE