Behavioral task
behavioral1
Sample
685c45eabdc4c1e962463a60108265f7_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
685c45eabdc4c1e962463a60108265f7_JaffaCakes118
-
Size
31KB
-
MD5
685c45eabdc4c1e962463a60108265f7
-
SHA1
7442de0b7c2dd871b78e4b3574346ff60f137549
-
SHA256
7f379ef20ab3285ba703d3360f762bc3525da18738342513f08d44df83d461df
-
SHA512
2f8ba1c74a43fdb7c8e40d26029f1f0021766b7f360dafea4580b25008559918a6228b6229acaacf2aa0301767936fef0ce4ecc3214dee8f88d0360020604242
-
SSDEEP
768:o6Zyqd5T/L3HZ7435RUMkOpJgG6OR5zXC7Oj7:bzvL6bUMBBvGO/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 685c45eabdc4c1e962463a60108265f7_JaffaCakes118 unpack001/out.upx
Files
-
685c45eabdc4c1e962463a60108265f7_JaffaCakes118.exe .wsf windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ