Behavioral task
behavioral1
Sample
72680d741b12487281a16aa0ec2a5a4c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
72680d741b12487281a16aa0ec2a5a4c_JaffaCakes118
-
Size
444KB
-
MD5
72680d741b12487281a16aa0ec2a5a4c
-
SHA1
26152cfa0432191a111f81930e7d5342d5a0c060
-
SHA256
00ebd11d10f18ce191273ab5ce3c3f7ba527b765a39e7df2c3cf5a5546034aa2
-
SHA512
a98e95db9adcf0de59111661a6c7169e81f83a922fb4f9fa861303aff95de623454fb26011f51b8cd1bffa70dc0c95d0886ea27f41a4ea95246cfc40e9a34e55
-
SSDEEP
6144:Uwjiks51n6Aa4W43mRDM5ZGiG38vPM4k528gBDNr5mcXFkh8SkIQayBhcE9:Ub5Ul4WTRkZZVvPZkWBDLmYYkba0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 72680d741b12487281a16aa0ec2a5a4c_JaffaCakes118 unpack001/out.upx
Files
-
72680d741b12487281a16aa0ec2a5a4c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 438KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 351KB - Virtual size: 351KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
hr4PKtEC Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idat_50 Size: 129KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ