Behavioral task
behavioral1
Sample
695e5624b3cd2cdfad790cb326180342_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
695e5624b3cd2cdfad790cb326180342_JaffaCakes118
-
Size
59KB
-
MD5
695e5624b3cd2cdfad790cb326180342
-
SHA1
58c329af67985d60c53ed943c1f75bf7c173b0bc
-
SHA256
e44b74bab0000b5ffd7f69e5f1dfdbf6bf524c962fdcf5bc00d342e8a025adfa
-
SHA512
35c439cf1b6b6bf48094954017ce2e7be3490ac7a73c57cd7861355857a4c8b1e7135203973d8328b76526f7f859ea20b5979ed9724a2c76f58fe6353c5c0490
-
SSDEEP
1536:RnJRSVleOZfKiaTvt1J7cGRJBj6Ap7DwhT:Rzc6CWeAp7e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 695e5624b3cd2cdfad790cb326180342_JaffaCakes118 unpack001/out.upx
Files
-
695e5624b3cd2cdfad790cb326180342_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.kewyo Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.axlgt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wqvwbj Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ