Behavioral task
behavioral1
Sample
2366682eaaf4efcd73f671d1d1b09969_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
2366682eaaf4efcd73f671d1d1b09969_JaffaCakes118
-
Size
16KB
-
MD5
2366682eaaf4efcd73f671d1d1b09969
-
SHA1
81eee7e7c5a670a6feb497c01a97f3e7c437dd8f
-
SHA256
88323d7d368d2ef5d37afd2b27bea46c714361b99e21e6357c8d7640a21600bd
-
SHA512
141a146e9c68a6db62695f1cbb9dac212061f445eba5b17518b1e7127edd1fb1b435281eda83adc80faaf0ab1db199bdae2562edd5f02dd7e284bc5a1a732cdc
-
SSDEEP
384:AlsG9FpxY8MwGT0yEb0uyYWB6X8ieu2eju3m:Al3M8MwGwyiAYWB6X8t5ea3m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2366682eaaf4efcd73f671d1d1b09969_JaffaCakes118 unpack001/out.upx
Files
-
2366682eaaf4efcd73f671d1d1b09969_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ