Behavioral task
behavioral1
Sample
8801596f954f9a8601cdc3318515d25f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8801596f954f9a8601cdc3318515d25f_JaffaCakes118
-
Size
59KB
-
MD5
8801596f954f9a8601cdc3318515d25f
-
SHA1
dad5de49683e134aac12ad85953e7bbc0923af5f
-
SHA256
ea68022f49618c06e6aacebf9dd6c77d8b3f3c220752b33a0d0421879e7bffd6
-
SHA512
b36911357ef1c4cba88e0f12066bcf0ba546b3219f07d99e39af6f0cefcbef84fdc864fdd70f979ef7f2e9c5a38e0565c7fe53979dc5136b5addc8f61c75af1c
-
SSDEEP
1536:EnJRSVleOZfKiaTvt1J7cGRJBj6Ap7DwhT:Ezc6CWeAp7e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 8801596f954f9a8601cdc3318515d25f_JaffaCakes118 unpack001/out.upx
Files
-
8801596f954f9a8601cdc3318515d25f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.kewyo Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.axlgt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wqvwbj Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ