Behavioral task
behavioral1
Sample
824efd135c8c491a8034a8bb324093c8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
824efd135c8c491a8034a8bb324093c8_JaffaCakes118
-
Size
420KB
-
MD5
824efd135c8c491a8034a8bb324093c8
-
SHA1
de47e00f9ca91979d637a2118078470b7a21614a
-
SHA256
cc306661594ce33e320ac547b6b4b4ab7e617c5d50ebaff62350d0e5d19d23f2
-
SHA512
d128957a9b91bbd58fd69b31524e283120427629e95ab39c621b608f7b6ddd599ec60804782ca21add83383f0535cfcf72e07cf01c4dd5e4ca2904d1b23465c0
-
SSDEEP
6144:yBEDehN/z3PoRe21kPFEFyJxbdA6tVLGb0Ksw84Yxt6hndWQ5wvV47HoRHzU7v:yiDehhfEeFWcxdRLEx/zYxALwW7IRob
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 824efd135c8c491a8034a8bb324093c8_JaffaCakes118 unpack001/out.upx
Files
-
824efd135c8c491a8034a8bb324093c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 311KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 540KB - Virtual size: 539KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ