Behavioral task
behavioral1
Sample
abe11943d8c026328b9dae8cc50ab5ae_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
abe11943d8c026328b9dae8cc50ab5ae_JaffaCakes118
-
Size
82KB
-
MD5
abe11943d8c026328b9dae8cc50ab5ae
-
SHA1
c341fdbc294a0bb8c63288204b174c7861c6598d
-
SHA256
a45ea9ec4d601a90afe85fb3d553759c14ea69b5f8d840e758ebfccfdb6135b4
-
SHA512
9c64486d368acf2faf8572eb62b211ba8b792682e53d95ed220104a258d33386b965e385f601194fb9db5dc3fb10d77a4a972e57ef5b87e5ee25969c39a162d8
-
SSDEEP
1536:9jKY5TpJ4FHvPzL6QxUdtKWCuCDxuiF6FVv05pY944/id9J9R9n6aK5a6bCN:9jF5L4JvPzL6QxULs9ui/09f/id9J9R7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource abe11943d8c026328b9dae8cc50ab5ae_JaffaCakes118 unpack001/out.upx
Files
-
abe11943d8c026328b9dae8cc50ab5ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ