Behavioral task
behavioral1
Sample
74cf0d462afd57d604cd1ab39e1fb729_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
74cf0d462afd57d604cd1ab39e1fb729_JaffaCakes118
-
Size
105KB
-
MD5
74cf0d462afd57d604cd1ab39e1fb729
-
SHA1
df244937e1b0c6f9fd4060e281f76156c1b8fbed
-
SHA256
8d1fbf81765a56ac9c89e53f1ddc340dc623e95652a1c79ad98cf25ac93c3c57
-
SHA512
d6126de0f3c910f157dd28b559c9e5222c9c0a47850b8268b90fc0b11c9b5c3ac454e68b0fc439553cbecaa16420f515e5735bbd012240ec6fe5ba2df7b09fa1
-
SSDEEP
3072:2duO+5sGIMaWpIN4sfug3hQIbIy2yCJfmQqH:2duO+5szWpIogRQOISCNmQq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 74cf0d462afd57d604cd1ab39e1fb729_JaffaCakes118 unpack001/out.upx
Files
-
74cf0d462afd57d604cd1ab39e1fb729_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 100KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ