Behavioral task
behavioral1
Sample
6a78b3ec3f282e8642815de2d6156735_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6a78b3ec3f282e8642815de2d6156735_JaffaCakes118
-
Size
114KB
-
MD5
6a78b3ec3f282e8642815de2d6156735
-
SHA1
9812205505bba6b34173cc1dd35e4f8ed970ce35
-
SHA256
1d5b3b4eda540b5094b73d0d47db8066f6ae672d6d640b0e64c1169740751f49
-
SHA512
b6b03fa7cc777761f133c0ed18f7f394e32bf5e44faa4b2ae5fc5465d75007effe6ad718a76d5902c2ef18403376905af5089c283a4f34cc7ac3968f45ec5ca5
-
SSDEEP
3072:pXdlFY3xjJFZpL2Dxn43x/AG0QMFNZaG2idyqRUMQw:pXVYN/ZpKD54nmNvsqtX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 6a78b3ec3f282e8642815de2d6156735_JaffaCakes118 unpack001/out.upx
Files
-
6a78b3ec3f282e8642815de2d6156735_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.8C9w Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.3D373v Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.e Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Hh072 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.23J15 Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.k4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ