Behavioral task
behavioral1
Sample
93f2b80cbed23d2b867082b22c32c29c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
93f2b80cbed23d2b867082b22c32c29c_JaffaCakes118
-
Size
140KB
-
MD5
93f2b80cbed23d2b867082b22c32c29c
-
SHA1
5c4d051d6770c06c33e97665e40a761c861a2380
-
SHA256
bcb778b910935b9b5ea63da54bf519aaed2fb6f729657cfb70fe01ef8473cf1e
-
SHA512
16e7a83343939af6f2db7d70bda50ad7406951025c57d872adaac862af5e40ef23948b523e7d03655252c5cac343accc8821572e0c290885f5c3829897331aea
-
SSDEEP
3072:C1PELuIf/D91w+Z/96+K2MR6wFsyZbWFn7uBq2jS9nhXHrMg:C1SxL91w+Zl65iYOuo2j4nhXHr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 93f2b80cbed23d2b867082b22c32c29c_JaffaCakes118 unpack001/out.upx
Files
-
93f2b80cbed23d2b867082b22c32c29c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ