Behavioral task
behavioral1
Sample
723bcb2363dba30e9915401882edc973_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
723bcb2363dba30e9915401882edc973_JaffaCakes118
-
Size
407KB
-
MD5
723bcb2363dba30e9915401882edc973
-
SHA1
9e6f9f91205619ea80a9bd697bf27910186a27c3
-
SHA256
4ed86a4b0d8d20f478d9b5c18368717e5d00fb63284157329590af5c4d376fa1
-
SHA512
0a54e5e94673a6130f4ac26fefef80127a8df0984393c0bfaa8c3225f0604fa68e5b052c3484e53042ffce1aa37db0d58b81f54e41dff37d635d99a5e7fbf051
-
SSDEEP
6144:R21IMtxtaMv5+M6BhO8xNo7GEgdzDTGqa4buCMdVfwApn2ZV1aW228VRTv1qf:Ri1t7aCiBhTDjTHbqCAoApn2Zu28v9Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 723bcb2363dba30e9915401882edc973_JaffaCakes118 unpack001/out.upx
Files
-
723bcb2363dba30e9915401882edc973_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 403KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 436KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ