Behavioral task
behavioral1
Sample
a5137be13aafc1357a48d076235702b5_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a5137be13aafc1357a48d076235702b5_JaffaCakes118
-
Size
208KB
-
MD5
a5137be13aafc1357a48d076235702b5
-
SHA1
f3f0e6e4e0cee674060e010c5f0fd9c7cd50ea27
-
SHA256
8ba48ecf9a6ea48ed18a171afcf246075776a0e3b4fecaf71f63cb5edaf5fff2
-
SHA512
5345f2b54cc9ebcf05a394bd3000d3505894e7ee471cbd2d49727f1de4b44f0df5f0bf7a8a463b82d3ce07d7e1c82d57b408e20d80a0b3e1370a980421721a36
-
SSDEEP
3072:E9rsFWRzKx5mP2v8PjLa3uOoXDniXVA5F9TpYsSYnUV1EITIHZ2GgUOjdFCyL+lu:bkzKmP2USFXgF9qCUbbTIgGYJaH2Og
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource a5137be13aafc1357a48d076235702b5_JaffaCakes118 unpack001/out.upx
Files
-
a5137be13aafc1357a48d076235702b5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 166KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ