Behavioral task
behavioral1
Sample
b7e3946f968db298dc83541474069117_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b7e3946f968db298dc83541474069117_JaffaCakes118
-
Size
36KB
-
MD5
b7e3946f968db298dc83541474069117
-
SHA1
cc0264051664b446a12c70c42420906a314c5d0b
-
SHA256
efab5a28f5d47206a2ea462a6b992e9f169b11308bf037a637dc77eacaebd829
-
SHA512
d5ab0ee1e2efed6a3f577756a72e9d5e89c46d24080eefb0bd2202fbfd5e6bfce1119b1a685f1e55a99f09f80fc4e8a599c02d4b375b7d17e173e14394d514cc
-
SSDEEP
768:hx2J7HSCkrczpAB6BIOeDqgnffLoUTVj3i7HV7lprZ9074iFWHnsTIYZTJ3:hUNyCkrczSBbZDqgnffL/T4kWHn4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7e3946f968db298dc83541474069117_JaffaCakes118
Files
-
b7e3946f968db298dc83541474069117_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE