Behavioral task
behavioral1
Sample
a8093b1aabdbc1f48d077326f191e659_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a8093b1aabdbc1f48d077326f191e659_JaffaCakes118
-
Size
281KB
-
MD5
a8093b1aabdbc1f48d077326f191e659
-
SHA1
e0f2f21b35bf0ad86700ac60b48cfee974bc43b5
-
SHA256
f0466ed8d4775a1e3920e0c86f0b0c54ceddf79cff12106d5888be3abd269414
-
SHA512
1e0479c98ba0d640649845ef3c7ff1b87ff64731a9c556025037a726b309297fce34856c18046ee8cada956c77b919f800206a50b7feb9c4c103fe12a086cf41
-
SSDEEP
6144:S5/UYKDLEt+7uUeTNklsg1Emi63IStN2jbLHtRgzx:SRy/37u9ksg1ELXQNWbo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource a8093b1aabdbc1f48d077326f191e659_JaffaCakes118 unpack001/out.upx
Files
-
a8093b1aabdbc1f48d077326f191e659_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 343KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ