Behavioral task
behavioral1
Sample
7116486bd56ac9ffb14ffaff74cc137a_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
7116486bd56ac9ffb14ffaff74cc137a_JaffaCakes118
-
Size
264KB
-
MD5
7116486bd56ac9ffb14ffaff74cc137a
-
SHA1
56c7fa42bef4167e3c280c34ff0b1fc9ecc919c9
-
SHA256
7dcc8c9c98f4f44e7f01165f50200b6a4870f2b8da3ecd1acec7ac8a7846ba68
-
SHA512
28fe8db1f2677d69c126c4eb2dc967fe3edf046e3891901934f2d171ae3ded279e981e9383291808c2dfadbb24c2d1931253e54a22c22f137525c62177cf157f
-
SSDEEP
6144:m8I/zaeSjQU+75r78t0aYYSJdLlea3u3oxcxo9gb:m8Left78t7YYS9f3u3oqxL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 7116486bd56ac9ffb14ffaff74cc137a_JaffaCakes118 unpack001/out.upx
Files
-
7116486bd56ac9ffb14ffaff74cc137a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 261KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 84KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ