Behavioral task
behavioral1
Sample
256245eaebee3e31061b1a8e9bd5af38_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
256245eaebee3e31061b1a8e9bd5af38_JaffaCakes118
-
Size
510KB
-
MD5
256245eaebee3e31061b1a8e9bd5af38
-
SHA1
eae87d43bf73a528cdf5899316c12af58a24e29f
-
SHA256
fe5624d05ef810099fec9a63b43d2b89af7b79541a99a0979b160091624b7583
-
SHA512
8e04f6357cc492aa3dcebbfeb25ee7a9088c323f66743ab68cea1710f205b30d1c5a63eeb30ae534468c819912864e41ff5cc9d85bc548c2ab2275329de2ca17
-
SSDEEP
12288:DbCmzkoE8Ar/wf0CHQJgwmF4QwJYpvQQnue:DfkV8mcwW9FaSvQFe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 256245eaebee3e31061b1a8e9bd5af38_JaffaCakes118 unpack001/out.upx
Files
-
256245eaebee3e31061b1a8e9bd5af38_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 9.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 483KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9.7MB - Virtual size: 9.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ