Behavioral task
behavioral1
Sample
59ec2bce3f8fed7412a34459e875c715_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
59ec2bce3f8fed7412a34459e875c715_JaffaCakes118
-
Size
6.8MB
-
MD5
59ec2bce3f8fed7412a34459e875c715
-
SHA1
121cfc42ab734bd633fd61e947f33c070a977682
-
SHA256
7b340db7c76882277ae2dbab34c25ccee343f288cf020d6e15b1c4e1e5db652a
-
SHA512
4c9cb94300586044c1146f6fb0a99ea42c269b2a37fbf842c05bf477c16eb2c24bea9416e77a3898790e787ab05c8910f5c25d57df805d8ff3056ba71af1c21a
-
SSDEEP
98304:AwQ5W74StTTYtxaGOEA3zz+7F9x5/F1IB5iKc6cPRi0Ck3l+Miy1JqKsW75+zmA7:S5a4StixpOPo9x5/w5otl9XcKNE6jpA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 59ec2bce3f8fed7412a34459e875c715_JaffaCakes118 unpack001/out.upx
Files
-
59ec2bce3f8fed7412a34459e875c715_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ