Behavioral task
behavioral1
Sample
68f02b369d9bf36b427f3f24a5e33c19_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
68f02b369d9bf36b427f3f24a5e33c19_JaffaCakes118
-
Size
92KB
-
MD5
68f02b369d9bf36b427f3f24a5e33c19
-
SHA1
70f22c1def9e17d382d73c4ced4ba8fab7bd2b43
-
SHA256
bfe531b1464b5c8c77eb8b5cd632f021d6e108e7fcf91133574724155bd8be3b
-
SHA512
4568217a8f6c408a5d33da4164acbea58b69870b87a61b410cef4d145e2185d71a077e7aef306d38f94c78d5cbe8e1719386fbc1795cf01614b8166f447d6352
-
SSDEEP
1536:/JsBxCjI3N+io+ZdG89YuX39d8RI+34DKd7l0DX+ivaX1AUGqTvdy8AcTBf07Qdk:BDjId+859YuX39d+I/wiuKA1Rhy8AcT8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 68f02b369d9bf36b427f3f24a5e33c19_JaffaCakes118 unpack001/out.upx
Files
-
68f02b369d9bf36b427f3f24a5e33c19_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 244KB - Virtual size: 243KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ