Behavioral task
behavioral1
Sample
74e65085db461c67900102902acce488_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
74e65085db461c67900102902acce488_JaffaCakes118
-
Size
14KB
-
MD5
74e65085db461c67900102902acce488
-
SHA1
5a3f2da992d8396778d3ab97d9f728727c3ba6c5
-
SHA256
22677c485b692377f4af3708aaaa659e786547f0782eceeb0fe1b92184646b2c
-
SHA512
2578601ae937c4f6ba8a67314775e6320be0ce9cac643be34c6313a8576debcfef27979bce29c06660aff003759c26f4a0fdc495828df7b03f4ede0f980ad23a
-
SSDEEP
192:shi10CMdCW1GwPzGb1r9gcOTvtYnFmAFdY55+O4IKfIaVz60S7nBVux8pCUHGc/v:G3Ce38wPzwB9QY/d6+OGk0ChsULcuZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 74e65085db461c67900102902acce488_JaffaCakes118 unpack001/out.upx
Files
-
74e65085db461c67900102902acce488_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE