Behavioral task
behavioral1
Sample
2d6a49219639d63428b91eb7647ce491_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2d6a49219639d63428b91eb7647ce491_JaffaCakes118
-
Size
515KB
-
MD5
2d6a49219639d63428b91eb7647ce491
-
SHA1
437f0c6ca23367b9c740dfde6c9ca3fb8e736d50
-
SHA256
eb40d8c0b0b02ddbf08ece73e7b184c34f59521579af495160d19f7789eace20
-
SHA512
02d8dfd7d3e74fbd26d12af3f64bab68b4db3e2a9bd0cf7c55492e128ffacae4aee9bb8623a92d42ce35049e8a4f5cc324879dc365448a7ed915c348e77d877a
-
SSDEEP
12288:fvGIztTa9PderlP+Dmer9b5hDvWmkqeFnCm69akWue:XhzlEPdesKKF7WcsC99iue
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2d6a49219639d63428b91eb7647ce491_JaffaCakes118 unpack001/out.upx
Files
-
2d6a49219639d63428b91eb7647ce491_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 488KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 297KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9.8MB - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ