Behavioral task
behavioral1
Sample
78a273214b1fd55b5eb4ce38a859dc1c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
78a273214b1fd55b5eb4ce38a859dc1c_JaffaCakes118
-
Size
1.7MB
-
MD5
78a273214b1fd55b5eb4ce38a859dc1c
-
SHA1
c711fadea1bf0ccfeb71066ee786867ac78a0b16
-
SHA256
400995154f8e57b60c22c8bb84001c9d20ec0a1be02ff41a8672fd0fb3f5140d
-
SHA512
19a46ae6f51e192ac9c8ca7415b861f863b601999b9f990aaedc4108ac938b8fcc68f2d1a362fa60650a388b56c25a015200b47fa4658067f34ef6d74833cb5a
-
SSDEEP
49152:qSrmXlDdnKfYrhmmvp1B0j+Qp4ZmdvwN44EyuF0TxL:qSr2nVkSvQppvYq6xL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 78a273214b1fd55b5eb4ce38a859dc1c_JaffaCakes118 unpack001/out.upx
Files
-
78a273214b1fd55b5eb4ce38a859dc1c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ