Behavioral task
behavioral1
Sample
4b2bab8ff5fa0828bacb8b8686489177_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
4b2bab8ff5fa0828bacb8b8686489177_JaffaCakes118
-
Size
411KB
-
MD5
4b2bab8ff5fa0828bacb8b8686489177
-
SHA1
7377666d015a467dd0f122393ed455f9111cd020
-
SHA256
3d8706b5636fb98d574df88f91a05564acfe75efff7fb5cf47f729b21f3239be
-
SHA512
929d533f77867adaeff162edbb6ced333b0c5af4217ff581cf9c4e29732719fcaaa9127a359740c2b7d93140dc4ea6e7fda195c3a452c5a0804e531a631fa7ff
-
SSDEEP
12288:Rrq5I+41dLZQKvtg7j+W/kQBdaowgEqmsFBITB07pFCaG5BDHVi:R+5IJD9QKG7jn1/CtqmsnITB0tfGT4
Malware Config
Signatures
-
resource yara_rule static1/unpack001/out.upx themida -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 4b2bab8ff5fa0828bacb8b8686489177_JaffaCakes118 unpack001/out.upx
Files
-
4b2bab8ff5fa0828bacb8b8686489177_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 410KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 534KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE