Behavioral task
behavioral1
Sample
71ea02f78a56a30ef3cbe4b7048096e2_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
71ea02f78a56a30ef3cbe4b7048096e2_JaffaCakes118
-
Size
53KB
-
MD5
71ea02f78a56a30ef3cbe4b7048096e2
-
SHA1
bc43f56fdc45303599e016edd818b6ff293d7df5
-
SHA256
eb77f10d0daa704b5fd9fa56c3afda9f8e986a80e2a03926f1b56898b412a427
-
SHA512
a444ccd92bb015741ee19f36ba4622e9bf26982390fcc91429f728d94c662f340d135556b7b66f68c85612eae9c0707cc581d80b857498af3f2e496cb11ce0ca
-
SSDEEP
768:jYKYTMXZCRVGPvhLpgefSDgyVgOZupAQ9mRqJ0Hehat3um2coQ9Cf:zsMpGYvNSky6O6d9mRj+IHvQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 71ea02f78a56a30ef3cbe4b7048096e2_JaffaCakes118 unpack001/out.upx
Files
-
71ea02f78a56a30ef3cbe4b7048096e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ