Behavioral task
behavioral1
Sample
8a2dde65a6c073e264212aea461315ac_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8a2dde65a6c073e264212aea461315ac_JaffaCakes118
-
Size
1.4MB
-
MD5
8a2dde65a6c073e264212aea461315ac
-
SHA1
0c48421cc3b9a6d3530abcfc796e7249e2a65499
-
SHA256
d08c043eee42e32d4f6a84de8a35d3519fa0787f3293df190ae150058a88378a
-
SHA512
2f1f9142173e70bbae9d6678ba351c50157a6f4d338cc3eef67a40359e1cb5323f94531dea7ae31633901c97ba7c16f136d570d827708addebbe444c0ca64b0a
-
SSDEEP
24576:xJ0amx8R4EF91QbAFKLrsvVBOgDCPPdk5wqVOO0TCDlX6KUbfrDwl2JpEF/2:rRSEKsgy3OgmFET0csbfrkl8E8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 8a2dde65a6c073e264212aea461315ac_JaffaCakes118 unpack001/out.upx
Files
-
8a2dde65a6c073e264212aea461315ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 136KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ