Behavioral task
behavioral1
Sample
82b58b6654d5fe02173438dc592d17f8_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
82b58b6654d5fe02173438dc592d17f8_JaffaCakes118
-
Size
198KB
-
MD5
82b58b6654d5fe02173438dc592d17f8
-
SHA1
e58182fb8ffff567774054357451aa9ca9bef873
-
SHA256
53a4f0585dc9e962e62f20f50380a1356862193f4e9a1e3a3ca2eceb97c3da78
-
SHA512
ac512941ed08c5cfb92350c095c5f9f206899286513a1a89710c6f7386df748f57075ecb77e48ec783ae5e1277eb47ee4d3a7443bac55d009faf847bc7651623
-
SSDEEP
3072:zs13Pqsl02S0BzaiGooOKUkwatzt/tMvYPAw80B77UN929q7VSm5Q4ZS/+3ONSsP:zsp5EMGooOKphGYPr77UNj5Q4N3wSC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 82b58b6654d5fe02173438dc592d17f8_JaffaCakes118 unpack001/out.upx
Files
-
82b58b6654d5fe02173438dc592d17f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ