Behavioral task
behavioral1
Sample
748a7244a95946c0b3a72165bd989bdd_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
748a7244a95946c0b3a72165bd989bdd_JaffaCakes118
-
Size
150KB
-
MD5
748a7244a95946c0b3a72165bd989bdd
-
SHA1
d0bd726715a7525dfdc751cbeffc1b84f891d404
-
SHA256
2e3bebb8c1fdfba2a4f08312ce39a662c3843d3e10a89d96489855c5073c57f5
-
SHA512
8a54f2fca0f1fc846b53083a4cf00e0acf27b01b7a0bd9ba9b9a9ebf71c6c143a9cda536ff083c124b032adb7353f8c9acef99d410e670f6c36a765ec71e6f9c
-
SSDEEP
3072:9yUBjy5OFvOERDbbNUE6oIRQIW1SqpjhN9OdGZSR:4tmDbBUPoXIWo6hCdqy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 748a7244a95946c0b3a72165bd989bdd_JaffaCakes118 unpack001/out.upx
Files
-
748a7244a95946c0b3a72165bd989bdd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ