Behavioral task
behavioral1
Sample
89b609d5d1ed949797c5490c682a1b67_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
89b609d5d1ed949797c5490c682a1b67_JaffaCakes118
-
Size
151KB
-
MD5
89b609d5d1ed949797c5490c682a1b67
-
SHA1
2f10861a71d21bc11c9ea139e8d8439818c8061d
-
SHA256
2d46a6d51ae6d76564866762667c548899e270a80a668a9d6722a5ed65214a90
-
SHA512
0ca7fe1b1dee2a4c5f84962813b206066348688bc7bc67bd680308e1cd2d62edc53c8a724f1753391d85a56291f160957803c505b45c3537839a77743392fde6
-
SSDEEP
3072:17mPkT1WOweFEUbw3ttt92XRtu3Fdf2j53F:1MOwtUo3EXWdCF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 89b609d5d1ed949797c5490c682a1b67_JaffaCakes118 unpack001/out.upx
Files
-
89b609d5d1ed949797c5490c682a1b67_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ