Behavioral task
behavioral1
Sample
6f2daba81e04823dfaf292c145826eda_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6f2daba81e04823dfaf292c145826eda_JaffaCakes118
-
Size
40KB
-
MD5
6f2daba81e04823dfaf292c145826eda
-
SHA1
af650bdf01c67e4498b65ad217c375de216b9ee9
-
SHA256
6add3381644a492280d39ed661443acc51799a1684e54975f239d52996917883
-
SHA512
4a8ade24c72b94a554cb662c0529cdfd12ffe36ed16180fbccda9351d1ac45b3a93d49e679717ef2ce27b4858548a87e63ff2c4ec46f14724fd7479a255f8c5a
-
SSDEEP
768:HlpPYSfn6xg0HzScie1pD3ikuEH20pnAhSFegrlga0C08H4jVebpOHT4ypO0ITjj:Hztv6xFHb1pD3oERpA4nuvC08H4jVebR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 6f2daba81e04823dfaf292c145826eda_JaffaCakes118 unpack001/out.upx
Files
-
6f2daba81e04823dfaf292c145826eda_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE