Behavioral task
behavioral1
Sample
87edfab89d2b87830a74ac5970b09ef8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
87edfab89d2b87830a74ac5970b09ef8_JaffaCakes118
-
Size
53KB
-
MD5
87edfab89d2b87830a74ac5970b09ef8
-
SHA1
9dd230b1da8e47af278ad7f33d0dbf9ee00b5982
-
SHA256
49c936d4420de0eaf73839d8d42b3b9995518e0f9195cc55c8dbc0e74bd355b8
-
SHA512
79cb09d5707ee71bdc29eac7c808a35e6a65d6c68bad2ba6d2cc1b46766b72c3c0b0d34ef6abdc5c7b9cd603fee20af62a8a6d1089253160b4111d94c81ba206
-
SSDEEP
1536:nqAC+lD2w3/14OsGTA/wWFcydT1XU4Rbq0:OiDP/1hpA7cyPN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 87edfab89d2b87830a74ac5970b09ef8_JaffaCakes118 unpack001/out.upx
Files
-
87edfab89d2b87830a74ac5970b09ef8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ