Behavioral task
behavioral1
Sample
a3ec412f803eeb3c7130c3027d44a60d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a3ec412f803eeb3c7130c3027d44a60d_JaffaCakes118
-
Size
32KB
-
MD5
a3ec412f803eeb3c7130c3027d44a60d
-
SHA1
539c5c116d7b1aa012c36a6e5378a9eaf2948867
-
SHA256
e445b8de0a3a956a0111eb62de82a1a2884928641e4240f448f165feb7d71fcd
-
SHA512
ba611b9042777efcb8381af3722590f91607085fb540dd8a65f8b45073ad508ab80de89448cfc2e9d8e70b6f626f393b4122293be3e6580aa6c088306af9871c
-
SSDEEP
96:nPv3RgIo9glChjV6KOXMuS2fM5G9AaL07lhc6Vmiy3RgIo9glChjV6FF:nXK7Ol8jVJOXMuiG9A86VwK7Ol8jVi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource a3ec412f803eeb3c7130c3027d44a60d_JaffaCakes118 unpack001/out.upx
Files
-
a3ec412f803eeb3c7130c3027d44a60d_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ