Behavioral task
behavioral1
Sample
b2cb960350fc737c2d733d19fd383bbb_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b2cb960350fc737c2d733d19fd383bbb_JaffaCakes118
-
Size
176KB
-
MD5
b2cb960350fc737c2d733d19fd383bbb
-
SHA1
af60e354cb2b2ff67ba665a94225a44ea3728f81
-
SHA256
766e895086494e2d357b622a4576debce89e24c2ac4a17556c31518ace4a05db
-
SHA512
11573cf990c95f254c3e2c79406c56429496c88291bdef77046b7c235261c48413cb906d32677030f8ac5da7d4c32f859f1560d783c22fddcc274ce0f81caf05
-
SSDEEP
3072:Ne8HF6YfOq9ICu6VFik0zM47cWzN3Jy0Up:NPF6Y193u6VFr0bhT+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2cb960350fc737c2d733d19fd383bbb_JaffaCakes118
Files
-
b2cb960350fc737c2d733d19fd383bbb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE