Behavioral task
behavioral1
Sample
93f656c12c1d98c3b393fc1a53c015aa_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
93f656c12c1d98c3b393fc1a53c015aa_JaffaCakes118
-
Size
2.2MB
-
MD5
93f656c12c1d98c3b393fc1a53c015aa
-
SHA1
eff22eff576a55180c8a7790d02944e146240ead
-
SHA256
d030194ff8a593495136a0ef1c033355a98c72632fc6167cb059b507bfd5df10
-
SHA512
ecb5982ef140d99e817ad64c697d7626bbf8e7e6cd58fdf24ebac756707a39723918a5f69b3c570fbc0748b728cb831827c83f94924019343bc49323688ec999
-
SSDEEP
49152:eRY7EygcJXyoZiVMsR+h1dIyKo8MCbYsugwnEDHuPGtSx/:F7EyLJioZiV9RS1dIyKBYqpHLtS5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 93f656c12c1d98c3b393fc1a53c015aa_JaffaCakes118 unpack001/out.upx
Files
-
93f656c12c1d98c3b393fc1a53c015aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ