Behavioral task
behavioral1
Sample
6f71acd3c52a46acef84b144a44dfb9e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6f71acd3c52a46acef84b144a44dfb9e_JaffaCakes118
-
Size
15KB
-
MD5
6f71acd3c52a46acef84b144a44dfb9e
-
SHA1
ce7059e113c75337e58e2b7aa1d6ed136311b2a6
-
SHA256
c6219f5071d58b1ae496900ce5a623ece23b777d1c50c11726fffe99d7100971
-
SHA512
879ee27f0e3a70083dad3a9b0a3f19fcd9b1cc2b672d3f94ed1f0bb609bb3f1c7c4778ce351d6b07670731bd143cc35543823d36097c2df2abe989967c0ba696
-
SSDEEP
384:AlW+HWCfrC4rmPL/eNWUzCKol27XHH1bVq5Em7YIfcA:AlW3c+ia/eNWUzCKD7X1ZUznc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 6f71acd3c52a46acef84b144a44dfb9e_JaffaCakes118 unpack001/out.upx
Files
-
6f71acd3c52a46acef84b144a44dfb9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE