Behavioral task
behavioral1
Sample
899cd10cbfd53aea91db8f29cd5ee378_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
899cd10cbfd53aea91db8f29cd5ee378_JaffaCakes118
-
Size
26KB
-
MD5
899cd10cbfd53aea91db8f29cd5ee378
-
SHA1
0c3e1b3e5ae6d6f8d49f2455adbee8c4c92d6ad3
-
SHA256
e8b6b514513c46a05ced35b6a9b7736b9077760b2f1e5f833d8f80b714ab443e
-
SHA512
09bf33099d34961b5c546ab15c4367f4d7b0cdd9fedc6b398d89210e31f204795e1b4942b4f2684f3dd9ad16ace57f2e7cefe94522a6eb0ad9a987605df7b03a
-
SSDEEP
384:yD311mOSNrjgN/VKyw1fvSCOWGrwJNkMahzQH2leoFZ3Vipo8SZ06gnSbtObq55X:2311ENGMxCJHwmMapFFRVielZ0Zn+d5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 899cd10cbfd53aea91db8f29cd5ee378_JaffaCakes118 unpack001/out.upx
Files
-
899cd10cbfd53aea91db8f29cd5ee378_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE