Behavioral task
behavioral1
Sample
a2c5a620345594f79cc1c07ecd37bab7_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a2c5a620345594f79cc1c07ecd37bab7_JaffaCakes118
-
Size
779KB
-
MD5
a2c5a620345594f79cc1c07ecd37bab7
-
SHA1
eda93b13fd9e68ee3ad01ef52229745bcaf4e407
-
SHA256
c2b7241523efa37e3e8bdc16f915c386cd9b38b6d677261cd8ef0f2b09442481
-
SHA512
2c1c01812b9978ac1bf1e0e59e1a6aa2eaf697b3564a3251e835ad5ed9ce2f34642dbeb95cfe5830b9d42b4618d11c010c24035798cf1347a35d884d2e76fec9
-
SSDEEP
24576:VetWwyy3/MF78f/r1DTlPL3GmJTf/unu:Vetzyy3/MFwnr1DN9TXun
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource a2c5a620345594f79cc1c07ecd37bab7_JaffaCakes118 unpack001/out.upx
Files
-
a2c5a620345594f79cc1c07ecd37bab7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 766KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 429KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ