Behavioral task
behavioral1
Sample
86a2bfb25138fda93da46fff92276ea8_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
86a2bfb25138fda93da46fff92276ea8_JaffaCakes118
-
Size
96KB
-
MD5
86a2bfb25138fda93da46fff92276ea8
-
SHA1
2ce1be054da34ce110c3e63ae4735e3f8bec64fe
-
SHA256
03b1410f08262ae637d1462a67856666d67670c5ce6867ddcaa38223d35ce9db
-
SHA512
bdfb4291ec0e5d910df2b9263d1a66331c50cee1775b84a8c32a2177556b29b672d4cbe9363a7b168d76e7a85b43883f06e36d14fe3013bfbea5b6f1e7e1a614
-
SSDEEP
1536:R7KNxX54VB+7NZX5pAfwHj/7Gypjb3Zmk4CpZ0kDX2ymp5Z:9KH68r5pAcDGEjb8k4a0ii5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 86a2bfb25138fda93da46fff92276ea8_JaffaCakes118 unpack001/out.upx
Files
-
86a2bfb25138fda93da46fff92276ea8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ