Behavioral task
behavioral1
Sample
03f166543ffe1af905bb8d3678ac18e9_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
03f166543ffe1af905bb8d3678ac18e9_JaffaCakes118
-
Size
875KB
-
MD5
03f166543ffe1af905bb8d3678ac18e9
-
SHA1
46aae9cbf3e902e0d2ae12570b663c9dda1b22a9
-
SHA256
cf63e4acbb28e2b5b132102163f461a541b81b24f76becb6ad4df3c21b2ea7ec
-
SHA512
17764f06ad1bf05e49c4979e934b2e49c398af3a99b680ed9b72fc0e16af1482579ca6bb1b331578c58d782eadd0051f92e81e82cf3d291507eabafdca220843
-
SSDEEP
12288:5j2sBDBpVL348L9Q/bxeXE9ES6+TIEaRZ6Jf+w4xhs3YScvY1qA0g6H29AZF4wZI:bBtpVUeq/FV9YJn8f+N6r6rFNmkPQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 03f166543ffe1af905bb8d3678ac18e9_JaffaCakes118 unpack001/out.upx
Files
-
03f166543ffe1af905bb8d3678ac18e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 837KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 836KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ