Behavioral task
behavioral1
Sample
a31ea6e3e25e65d5177ffff9faf8f108_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a31ea6e3e25e65d5177ffff9faf8f108_JaffaCakes118
-
Size
304KB
-
MD5
a31ea6e3e25e65d5177ffff9faf8f108
-
SHA1
40df80c3c606a0280161a0069a77d46678611910
-
SHA256
c886bed208b2610f077cb40dc560bbbf48a0301416a95a49e5a83b63cdac1d28
-
SHA512
e10c03665e71d5011d80187ef61bfcf05cc9cf8117bbdb65e3905547336498ac122bc03418b1c0a859e53563ac5d2a32015ccd83e507e25435a9a2e6932e59f4
-
SSDEEP
6144:TUqK1WAJ9A84Vjz0HB48Db8rrZEquepe00WHGtYZgPgtzatUtt7M13gGtLm:XiWGybv0HB480ZEx+LpH1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource a31ea6e3e25e65d5177ffff9faf8f108_JaffaCakes118 unpack001/out.upx
Files
-
a31ea6e3e25e65d5177ffff9faf8f108_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 232KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 400KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ