Behavioral task
behavioral1
Sample
00432811d93b9316e3fc7199c724147a_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
00432811d93b9316e3fc7199c724147a_JaffaCakes118
-
Size
86KB
-
MD5
00432811d93b9316e3fc7199c724147a
-
SHA1
21d1d0bc118e14d7992690c123e810fe2c6846fc
-
SHA256
52e7aded4b2bbcefb38aac28359ba578b5b06583df1b949d60d28aa8c92807d8
-
SHA512
179267d91427ad6f6a820ab5bd5f6becdc0466dea6ff993e135376cff67b6966f0f740c2ea88b8354db3f804786a2379533b33d31bcac2de3da57f9024c7a63b
-
SSDEEP
1536:fQ47YQMxU5evTH40TL19b3J3+nPrpNiXprxfIf2xBvdKkA5JGI1tSs:fvlr5evTH4sbJ3+nP2XXfO2Xvkv+s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 00432811d93b9316e3fc7199c724147a_JaffaCakes118 unpack001/out.upx
Files
-
00432811d93b9316e3fc7199c724147a_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ