Behavioral task
behavioral1
Sample
aa0a05ae7d5a2a990cf8bfaf74d36fbd_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
aa0a05ae7d5a2a990cf8bfaf74d36fbd_JaffaCakes118
-
Size
14KB
-
MD5
aa0a05ae7d5a2a990cf8bfaf74d36fbd
-
SHA1
8a1bd90891449ec993d48276a83f60081ab54001
-
SHA256
9760c84cba7f86af519a8445048d249546082f5010d83706d809cd6ede8d81bf
-
SHA512
9f9ee9392f18d8f291cf7eaa8f2bdcb383fa842afdebd179bab01d1634fbe1ab8aef6f4fc9896b16fb0f38c3f1492bb12a6a6084e6008da00683ca4e928e27c5
-
SSDEEP
384:Qh5ZqtNOeL6Un80ZRn4KSCyQ814l7Ii+vv/6bn:uX0EeLf80ZRn4+3uosl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource aa0a05ae7d5a2a990cf8bfaf74d36fbd_JaffaCakes118 unpack001/out.upx
Files
-
aa0a05ae7d5a2a990cf8bfaf74d36fbd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ