Behavioral task
behavioral1
Sample
9fff93e6f9f8b0c81703aec02305fbe2_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
9fff93e6f9f8b0c81703aec02305fbe2_JaffaCakes118
-
Size
202KB
-
MD5
9fff93e6f9f8b0c81703aec02305fbe2
-
SHA1
37686c00656941c740d8a6d78d6ac288b0e7950e
-
SHA256
e37394dc3e0d9e150498aa77987db0604a2f054f040b67bca1d09a7bdbbef44e
-
SHA512
b8e9b6c52adb831be6d49cc5e047469e42cda9845d3e0bfae9aaff643c2c53e653bb1241c025fdaa16ec2e35b9fa28728a54ec7e0cf257e189e8923ed05a5983
-
SSDEEP
3072:lvfcStU4HIhV9JOCpgdqHQDbPaGQKIEaMAn7EL7KhbKOOVbAw0hA9ZrcUP:l36iaFH6y5KjlKXO9ehiD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 9fff93e6f9f8b0c81703aec02305fbe2_JaffaCakes118 unpack001/out.upx
Files
-
9fff93e6f9f8b0c81703aec02305fbe2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 197KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 388KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ