Behavioral task
behavioral1
Sample
727a3c98bfc50d62dca537ec63bce998_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
727a3c98bfc50d62dca537ec63bce998_JaffaCakes118
-
Size
14KB
-
MD5
727a3c98bfc50d62dca537ec63bce998
-
SHA1
61f8314eec430f6c649113a39677fb6c9e30ea8f
-
SHA256
6d7f656ae0094f6f59ae06b902ba2fbebd8ba2283010b4a98ba1f8c36aba9b11
-
SHA512
c7f77bbc8c59d532110cd2865d2700d6becce1e0eed1bc73b20e8c7af52574404fc14c40120806151d91e0e719dbc15e7b17abcb2a6986ee27f00b5ba87c2665
-
SSDEEP
384:sJMP8oji7BniC3a3Vi0WIbQ7cCFQDFP/vy0uv:sJe8LBniC3kT07cCFQD16v
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 727a3c98bfc50d62dca537ec63bce998_JaffaCakes118 unpack001/out.upx
Files
-
727a3c98bfc50d62dca537ec63bce998_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ