Behavioral task
behavioral1
Sample
aa402bdc513062c1fbb12d3aeee0fb6c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
aa402bdc513062c1fbb12d3aeee0fb6c_JaffaCakes118
-
Size
25KB
-
MD5
aa402bdc513062c1fbb12d3aeee0fb6c
-
SHA1
d0c949f36478a4fe8de49b725815f656e10fdf4d
-
SHA256
041a4834d7257aafc0384726229c82176b100902b1298f5c9e766f8e6122a233
-
SHA512
0bf1efc1b980d91d74a6a1f97ca4ea22653da0a25cbdeeb8e363afc8f9fb466151f6eb75fe2d7c79817083af5a7268c8802a9fe63f83a99da4468f2a874f135f
-
SSDEEP
384:HK+4cgPfSdPmVWJDfxPuTlPxArVcnDoUxLlwSpxr5v5DpKBnOne:HK+4c4fSdPpDfxW5xAqDhGsAO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource aa402bdc513062c1fbb12d3aeee0fb6c_JaffaCakes118 unpack001/out.upx
Files
-
aa402bdc513062c1fbb12d3aeee0fb6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE