Behavioral task
behavioral1
Sample
70e8942a6a3740da4f5d6dcb3520b20c_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
70e8942a6a3740da4f5d6dcb3520b20c_JaffaCakes118
-
Size
1.2MB
-
MD5
70e8942a6a3740da4f5d6dcb3520b20c
-
SHA1
b54abfdbf2ab87ed8d9c7c31fdd3b059c7bcb41d
-
SHA256
4474ac17999993dc90a2428df4922d5e084628218f875d1f01293c560b1444d5
-
SHA512
02d7ae951dfb83a6b6367f5297228862fff9faa05c6d2a25ee41a13a1ffd038454a6e20aa01b66cceaa45b3f8fdaf0e03ccab1b30fe532b019e66a75dc4efe5e
-
SSDEEP
24576:vYfZB0KHdk/2Y5XcHxPBBbhaza1yQNZRaKvxMqZjCPjXraNtycJxDfiq5:vYxC69Y5XkxPx3lNrZnjwXrabycJlfn5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 70e8942a6a3740da4f5d6dcb3520b20c_JaffaCakes118 unpack001/out.upx
Files
-
70e8942a6a3740da4f5d6dcb3520b20c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ