Behavioral task
behavioral1
Sample
955d12eba54e78122078136f4cafbc7c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
955d12eba54e78122078136f4cafbc7c_JaffaCakes118
-
Size
54KB
-
MD5
955d12eba54e78122078136f4cafbc7c
-
SHA1
bc36e4d7c0ac8f1f4e49bb6124c921716ddf58fe
-
SHA256
85d730647edabe0a8a15c1c32d787e362a931ae1510d967a9d346e05ba3923be
-
SHA512
7675f823eecc90bc886517da0b7a8b19b7258ca1a7789f4775355cafc160fd2d892281ce9cf811a2fde8c7d0be2f83d332b56c0349cd7370370d4f682e775dc7
-
SSDEEP
1536:aPaVqnKR4GN9eq6XYBRR7z5qVVXJ0I9UK1iQ:aPICKGGN4q6XYBD7z5qHXJ0YiQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 955d12eba54e78122078136f4cafbc7c_JaffaCakes118 unpack001/out.upx
Files
-
955d12eba54e78122078136f4cafbc7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.AtAfF Size: 4KB - Virtual size: 4KB
.HKNF Size: 4KB - Virtual size: 4KB
.HmVR Size: 4KB - Virtual size: 4KB
.bRHVg Size: 4KB - Virtual size: 4KB
.OBoPm Size: 4KB - Virtual size: 4KB
.MuLx Size: 4KB - Virtual size: 4KB
.cPMGZ Size: 4KB - Virtual size: 4KB
.tOntp Size: 4KB - Virtual size: 4KB
.ESoqz Size: 4KB - Virtual size: 4KB
.AeuMh Size: 4KB - Virtual size: 4KB
.ukPZZ Size: 4KB - Virtual size: 4KB
.cNGNs Size: 4KB - Virtual size: 4KB
.EUYbS Size: 4KB - Virtual size: 4KB