Behavioral task
behavioral1
Sample
3638263d7240260f5ba428b88ec5039a_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
3638263d7240260f5ba428b88ec5039a_JaffaCakes118
-
Size
338KB
-
MD5
3638263d7240260f5ba428b88ec5039a
-
SHA1
ca3e65b82ec32cdbeae59585b175f8cadf580181
-
SHA256
2e1ef3bddcf507ddaca3e57f7d7f156d24a47b89780274ec5af81f331c2d1615
-
SHA512
bf8b32f393182bfce304897e9041f1a57bfbcb46a32a205a982a87ac034482c3b59a1df8cc6747e9af88add2137d3f8667da64c85dee65c2908fa0cbb4f4c9c8
-
SSDEEP
6144:IqIAr1m4sqTS1nDZSdVwPk+bC6XWwOPVE1dwXHzo9g/+ia9:IXArbq1nNSnwPo6GwOdE12XHUjN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 3638263d7240260f5ba428b88ec5039a_JaffaCakes118 unpack001/out.upx
Files
-
3638263d7240260f5ba428b88ec5039a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 256KB - Virtual size: 254KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ