Behavioral task
behavioral1
Sample
8eee9686bef50a5024fd54c2eefeece4_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
8eee9686bef50a5024fd54c2eefeece4_JaffaCakes118
-
Size
13KB
-
MD5
8eee9686bef50a5024fd54c2eefeece4
-
SHA1
2e3f050f566b02b665f681536f5f4e886fa885c0
-
SHA256
4b64e357833d5e165b81a830c203e214c3b99d71ad41f5f371ec4ae1317f783a
-
SHA512
9a2dbf5e382b14f503131d6f1139d0522770eb4ac2f7781a0dd38dbc4e260bb9675bd8028cba9e10557cd550487ecf23dfb7716282c0935cd6341d4525362bc6
-
SSDEEP
384:vW26NmQoyc/bnBD93PsWjm4RtKR8cCv7H:vVWmVycH93tDc6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 8eee9686bef50a5024fd54c2eefeece4_JaffaCakes118 unpack001/out.upx
Files
-
8eee9686bef50a5024fd54c2eefeece4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ