Behavioral task
behavioral1
Sample
95b08ca98faa74c503f57885e83a8af4_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
95b08ca98faa74c503f57885e83a8af4_JaffaCakes118
-
Size
1.8MB
-
MD5
95b08ca98faa74c503f57885e83a8af4
-
SHA1
9c933db6e7ddea4eb0f47c824f02ce724d22c268
-
SHA256
c631b779b0e448ee5ed86b503877bb4731b60e0634cbd2d8ffa7ad0910efbf17
-
SHA512
f7791d775fa7639d6e20388569e01b1dc16aea407c19dff3d7ddfac6a8933cd680e47cc2c0789f5e3edac5b2285ebbce3787c20578951b01980df87dc28f993c
-
SSDEEP
49152:9yrVg5iwsXqqWtIUmJGPPWZJ/8MtNA6UTf49mpwq80UWw:WVg5iwsbmIjJsPWZJ/8Mtu6kQ9MtU/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 95b08ca98faa74c503f57885e83a8af4_JaffaCakes118 unpack001/out.upx
Files
-
95b08ca98faa74c503f57885e83a8af4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 500KB - Virtual size: 499KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ