Behavioral task
behavioral1
Sample
9739380dc9d6e1f6e572eb7cf037d6b1_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
9739380dc9d6e1f6e572eb7cf037d6b1_JaffaCakes118
-
Size
45KB
-
MD5
9739380dc9d6e1f6e572eb7cf037d6b1
-
SHA1
3d454a3854201f7692825fdb7072fae53b6f4f19
-
SHA256
d9a98139a0b700ca27f93f6470f645d6dacf143b27dbe193f9dd11f33a6e88d6
-
SHA512
45b7deb451ec6431d5e47904b96d967f15908109f26862c238e02f1f71c0d8daf32b1076aca5e442283d37986da6b084ee6c372da97c9ff33fb1dee39365b52a
-
SSDEEP
768:3OulEojqaREiU13sm7r61v+MjhbUBs5HUyXCmZwTaaCacq55DtJV7YvKHvDsVks5:eul1DEX9VMv+MtAs50yX5ZwAqTHJYvs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 9739380dc9d6e1f6e572eb7cf037d6b1_JaffaCakes118 unpack001/out.upx
Files
-
9739380dc9d6e1f6e572eb7cf037d6b1_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 1KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ