Behavioral task
behavioral1
Sample
69b37680ce59b1fb81bc9007198eea1f_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
69b37680ce59b1fb81bc9007198eea1f_JaffaCakes118
-
Size
49KB
-
MD5
69b37680ce59b1fb81bc9007198eea1f
-
SHA1
538ba4e1eddb2359336571d4d677027d220368d2
-
SHA256
cc024bec18108589ddb7ceb6cc221ee8062d2e2d841482925e03bced8ecd26d3
-
SHA512
f53a2d1db850fdfe39d6f3b25211e6b1c4a9f93bd12cd4a4f8e506eee1764a71c3a036e4a220c74924d5a76e5d397f43eb99508c53c9400fcbd25d652d8229ae
-
SSDEEP
768:d9MdqIG4wBa1cmf0SxtskBWrlXqC9fXFxdMdMNV2wtXX+qEJFPCLdTB2U3FjBX:d9MdRHXrWrRPyC7TBu9qL/2UVjBX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 69b37680ce59b1fb81bc9007198eea1f_JaffaCakes118 unpack001/out.upx
Files
-
69b37680ce59b1fb81bc9007198eea1f_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.idata Size: 1024B - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 1KB
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ