Behavioral task
behavioral1
Sample
72e9aeb09e40d92924c60df87f9dce9d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
72e9aeb09e40d92924c60df87f9dce9d_JaffaCakes118
-
Size
812KB
-
MD5
72e9aeb09e40d92924c60df87f9dce9d
-
SHA1
7744c13b382b7f8561b4d34d4a1a90b18dcaa573
-
SHA256
935a4c78b6b2a32d5f9d944ab6cd74047c47713c35a6cddb678efca5f94af6e2
-
SHA512
23cd4437586813457a3c1b3250917250d49ba2e09865c41776ae2c0981a6b51009cbdb9a31985c5cd2839416b9505c4911578bb6a8c086ef9ad5f4a7062dcae4
-
SSDEEP
12288:VHLUMuiv9RgfSjAzRtyJVcF6k56bv8Yi0MoSNXaMYjvZRMjiNqhrMbE/:dtARwVcT6DivORCkqSby
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 72e9aeb09e40d92924c60df87f9dce9d_JaffaCakes118 unpack001/out.upx
Files
-
72e9aeb09e40d92924c60df87f9dce9d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 253KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 495KB - Virtual size: 495KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ