Behavioral task
behavioral1
Sample
b3b694dd2126b8348b9f300848698281_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b3b694dd2126b8348b9f300848698281_JaffaCakes118
-
Size
73KB
-
MD5
b3b694dd2126b8348b9f300848698281
-
SHA1
d4dc68f8813d8fbe81781a52cf5601ce310fc538
-
SHA256
4e900c3d3611914473c14396e1753c701a6923f691412ad8fb9e01723d2283bb
-
SHA512
7b801d69cf6e5bdcdbb2b42d1221fffb22e2506f76fdb9f187edafc4d2e3d478df5f8b32d98c6134f123793abd031da77bb107ceb44af899e51caebe4f5aefbf
-
SSDEEP
1536:xD5pvjxly+0owMWg69eGHSOZ0uGs0hc6DzaeJ5RQ:xD5VLy+JwM9s1HnZGs0hvmeu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3b694dd2126b8348b9f300848698281_JaffaCakes118
Files
-
b3b694dd2126b8348b9f300848698281_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE