Behavioral task
behavioral1
Sample
792189cee471e5064ead0ae6f18d9d25_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
792189cee471e5064ead0ae6f18d9d25_JaffaCakes118
-
Size
2.5MB
-
MD5
792189cee471e5064ead0ae6f18d9d25
-
SHA1
231c737eeda2ccc77d1e056c799d7e68c37e2181
-
SHA256
ce5360e76e130a3fb31c52203c79f511fb6675d312a5080dba8c9a781bd971b6
-
SHA512
af6af2a60b077235a8be93994806b08b4c478e5b93867a4d25d6d6847e47e3b9b932e185660507b351b3d64c24670f4bea74c348da05af5bc541271ee200d311
-
SSDEEP
49152:oX7fYyoH1hQA+a1HdBhlTjeLZ3c2NwR5DkjIz4KXndMU14ZJNvjgl/W/q/Ed:g7fYfH1hQA+aHdlTIZ3TNwfAja4KXnuf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 792189cee471e5064ead0ae6f18d9d25_JaffaCakes118 unpack001/out.upx
Files
-
792189cee471e5064ead0ae6f18d9d25_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ