Behavioral task
behavioral1
Sample
72d07078de6b49bb82c80cb4210f504b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
72d07078de6b49bb82c80cb4210f504b_JaffaCakes118
-
Size
49KB
-
MD5
72d07078de6b49bb82c80cb4210f504b
-
SHA1
5a5ee46f1107fda7e383ae54697b4e27122ff171
-
SHA256
eef4b8d5a8c7a170af7f10faeaa66bd7e661b3ccb019ea8aa93e748fc731d49d
-
SHA512
6c258e026c1502d1eb8e5fe2269ad3b4d43e7c9f3363317a796d86a4741035b046419125dad5a3f45c46b840c9b7e2a0199d9d28f31f8a962e68b184b59ab0f8
-
SSDEEP
1536:4PmNfN/sxrugF1KKGhjhYsSsHyh+D+CkL:4PofN/sxrBLKV6sSOVS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 72d07078de6b49bb82c80cb4210f504b_JaffaCakes118 unpack001/out.upx
Files
-
72d07078de6b49bb82c80cb4210f504b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.TEXT Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RDATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ