Behavioral task
behavioral1
Sample
3be6114a3412cda9b55890459bee25be_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3be6114a3412cda9b55890459bee25be_JaffaCakes118
-
Size
18KB
-
MD5
3be6114a3412cda9b55890459bee25be
-
SHA1
00a725d31b6dacc454ce8e7923d0faad52dfc0d4
-
SHA256
a9cdc3a732aec428807bd898f90ca35c57875737ddf6c709b1727d1dbf09d851
-
SHA512
5a01dab523aba32800c423a869ff3be1ae044f77e7c1f1b91a479f8b26acf5365bc723c76a1f14bb9b5137fc8afe4fbbf7bb4ee7a70afea0da7ddd1a2fce6bc8
-
SSDEEP
384:Nrs9tHsr2QMaitGB6AQ9oBX0ssKBGIVnxI3Fqut:NrXyQ9BB6AQ98X0fKhjat
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 3be6114a3412cda9b55890459bee25be_JaffaCakes118 unpack001/out.upx
Files
-
3be6114a3412cda9b55890459bee25be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ