Behavioral task
behavioral1
Sample
974ada048bfd93a6959a92f5b2a54315_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
974ada048bfd93a6959a92f5b2a54315_JaffaCakes118
-
Size
133KB
-
MD5
974ada048bfd93a6959a92f5b2a54315
-
SHA1
8df8b3d9fb517dbea96289b8fefcbf476c1786c2
-
SHA256
2954b0fa6aa4249f5228da3cc0961793cb0f35a7218504a7506f0d68008c181d
-
SHA512
3b61dfd426728fe0fbb9d732a4eb8553775ba6daf51634247a1ca35abae4ee7c59089b191db57ff524b450c5023d8b2434a76106255b90466be015995df0de0b
-
SSDEEP
3072:8CzHhMfeBFHZAbPl7JYiXM5gFXchV7O7UFOVpmZNAPNXt/:Z4eCbPZJYEoV7kXXt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 974ada048bfd93a6959a92f5b2a54315_JaffaCakes118 unpack001/out.upx
Files
-
974ada048bfd93a6959a92f5b2a54315_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ