Behavioral task
behavioral1
Sample
6830600322ba99372ef4ade8dad00d13_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6830600322ba99372ef4ade8dad00d13_JaffaCakes118
-
Size
250KB
-
MD5
6830600322ba99372ef4ade8dad00d13
-
SHA1
1d56affbbfca10dcf72384c64bf9a5b602f57840
-
SHA256
03f404b3f128b88b68281d293f1df8bc8f25558d79188a59c3271117fae6b400
-
SHA512
063be57d2aa22dfaacf704b269e94e9533643d2826bc53a225b977e22babf37ffd3f273b2a9c0c6a2f3662ede384afd42e8213ad2b04f0a8be185d6c3f8b8b9e
-
SSDEEP
6144:nGLMGuV1iVrXa0WQDZaI4SMkPCY7JO38P38:nG1+1ipXadILMk6Ek
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 6830600322ba99372ef4ade8dad00d13_JaffaCakes118 unpack001/out.upx
Files
-
6830600322ba99372ef4ade8dad00d13_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 35.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 212KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
.ndata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 35.3MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 193KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ