Behavioral task
behavioral1
Sample
7716f4f3e80abd4d2ab46f3fd8f4f219_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
7716f4f3e80abd4d2ab46f3fd8f4f219_JaffaCakes118
-
Size
143KB
-
MD5
7716f4f3e80abd4d2ab46f3fd8f4f219
-
SHA1
920b919de3ef26ea6f5d00f1dca54994baf279e9
-
SHA256
4068ff842167d8a95901f61270c85e9d7c5aca279ab6d0ddf9b3f4988115b14c
-
SHA512
2b764677843a844bb84988cca0d4bc74c06a4b816567b231ec9ba8fc4ebc273704f2a8d481a531b8086ef7f61e0a32938659681c7429c4b55bb4df41b11aeae8
-
SSDEEP
3072:2jM3u17Je0cnlRJFaijmZEBRiix68PSKipVyjksed2Vd5RV:gMo7J9clwV8Zipojc2Vr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 7716f4f3e80abd4d2ab46f3fd8f4f219_JaffaCakes118 unpack001/out.upx
Files
-
7716f4f3e80abd4d2ab46f3fd8f4f219_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ