Behavioral task
behavioral1
Sample
8b810a35f69e7c8614660a3f34a6526b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8b810a35f69e7c8614660a3f34a6526b_JaffaCakes118
-
Size
1.2MB
-
MD5
8b810a35f69e7c8614660a3f34a6526b
-
SHA1
08cc2ecc01d7e3c62d94ebac2969f04b0a17336b
-
SHA256
41adcdd9214a14c600a009e827f2750a66b150509a28e29934dd3bd3fae20615
-
SHA512
a1ab382c85e9baf2f2e98ca9ad0b7255e3d173d85900456e155e9d780ab1400f099c61067c3d75b9fb050886bfe4077fbd99d77d8e9ac24ffc59ef52cacd2b70
-
SSDEEP
24576:vfxzR9jw5g7iGOiwhWv9GzccKthF/pkdJp6wzsmZOxzWukwcsXLsEalyE28JF:xzRBE0bOiwhWlG43hledP6wzsmZ0Wrwt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 8b810a35f69e7c8614660a3f34a6526b_JaffaCakes118 unpack001/out.upx
Files
-
8b810a35f69e7c8614660a3f34a6526b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 532KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 639KB - Virtual size: 639KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 943KB - Virtual size: 943KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ