Behavioral task
behavioral1
Sample
766b5a6164541148b402f0c54056851f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
766b5a6164541148b402f0c54056851f_JaffaCakes118
-
Size
44KB
-
MD5
766b5a6164541148b402f0c54056851f
-
SHA1
2f082cb5601d7290adf1538e472ce1c25162bc0a
-
SHA256
c93e2127f551910890daf6a6cfefa59bf0abecedd4ecb71cb46be592dddc24a1
-
SHA512
8ebf0b2eebfa2f49d42fdb9fd5b5e4a2e90bcff3b12b8288d2458e4e32e0633ea9f62c75f2735e2586536f8686eb8fbe5c986f87c1f431fb30dc85bd1c65e439
-
SSDEEP
768:f/v6TsN9Q9PJejgFas41egj9CjY1VdiqQfUwRPb9Zcnv9nxrg2ab8XWF:fHssnKPJeMFatD9UY1VEBciZcp5g2r6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 766b5a6164541148b402f0c54056851f_JaffaCakes118 unpack001/out.upx
Files
-
766b5a6164541148b402f0c54056851f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ