Behavioral task
behavioral1
Sample
aa6c554833aa20c18f0daa9687b41090JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa6c554833aa20c18f0daa9687b41090JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa6c554833aa20c18f0daa9687b41090JaffaCakes118
-
Size
7KB
-
MD5
aa6c554833aa20c18f0daa9687b41090
-
SHA1
2bde38704e04d01fa0c08346ca7129cd8101c175
-
SHA256
310043d4b4c52b304367922dcc51a56a67ea6159991491f957648c7e9c46717d
-
SHA512
6e8a6e890122cdaa8a902dbd5677d823c569fb1d29ff9569c8b9e01c811f1ab048d907c8c8abc9d30a52a7a25370074bd5e15c5f888cc70d3fac779b1e698e3b
-
SSDEEP
96:H6WchDofLnvbbl/ukqsT/rd2Yb8/WFBLzGlfrBKA2gk0VLDVSK/4LMLEsVlyRh7:HZch8fLvNuDsTzd2A8/GLzGlfl5uM4X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource aa6c554833aa20c18f0daa9687b41090JaffaCakes118 unpack001/out.upx
Files
-
aa6c554833aa20c18f0daa9687b41090JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 33KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE