Behavioral task
behavioral1
Sample
b2db0228370eaf6d268b5483ad76b4d9_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b2db0228370eaf6d268b5483ad76b4d9_JaffaCakes118
-
Size
1.5MB
-
MD5
b2db0228370eaf6d268b5483ad76b4d9
-
SHA1
3cc0ef8043c57eb637d7d3d4047e4d9bbc0257cb
-
SHA256
3ce6d5d5610a581505209d9e75694fc6f8f56b075c8ba8f3752f7ffee05c16d4
-
SHA512
34d06eb582006788bc1a3ee9f44594bd83018ebaf52603b041e6e51f0e35cc4385e7aceaaaf0a7a3754f3335d1bb9bc6b5d92f3b180fa68cb78438963ac52369
-
SSDEEP
24576:4vg3z/6hFmICx+NclOMuFOp1NARDg2uQO36sq0:4TnqUYAOABuk0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2db0228370eaf6d268b5483ad76b4d9_JaffaCakes118
Files
-
b2db0228370eaf6d268b5483ad76b4d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 852KB - Virtual size: 852KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 646KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE