Behavioral task
behavioral1
Sample
82eb2750aaca3fb54f8f93e93199fcef_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
82eb2750aaca3fb54f8f93e93199fcef_JaffaCakes118
-
Size
108KB
-
MD5
82eb2750aaca3fb54f8f93e93199fcef
-
SHA1
c4dd7ff3288874a05282a2bc8bf042df386b1a58
-
SHA256
0d7010befbd4f919eac867579f3aadc6110c74315d5086c12268a13614a8dda9
-
SHA512
ebd60bc7dd22ac5d1fa32eeeafd9c05d8466638cfb85704ca6549a7c92758821182d7063ba503040e26d097e92887b1074127e6061d455b71f6704f229f2a65c
-
SSDEEP
3072:xOo0xtj5/rHgu+oJdIq0I4ejYQoeBvD8s:s3t/rHgu+edAIJYQnBv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 82eb2750aaca3fb54f8f93e93199fcef_JaffaCakes118 unpack001/out.upx
Files
-
82eb2750aaca3fb54f8f93e93199fcef_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 152KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE