Behavioral task
behavioral1
Sample
ac7b81317f52c182ed1482f7b2d06fe8_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ac7b81317f52c182ed1482f7b2d06fe8_JaffaCakes118
-
Size
144KB
-
MD5
ac7b81317f52c182ed1482f7b2d06fe8
-
SHA1
7a94079813668372a5a5604d5c9411328dd6b2ac
-
SHA256
56568087fd77debac94134523125e79ce767e8b76f9e97be7439e1bc6d758f30
-
SHA512
cda1b32b3b345edbd7d608cba12a8eebe9e39c73f3073be7b65a2b623c2fd672ff463b0df80db871b76903e2e3dedc8176a554dffc1b777f7e02cff0e1c4a50c
-
SSDEEP
3072:rpusSXR6bitA79CnPxWJG2wIAsAyVj8VlhKswK2bctuoW:rp62iGwgw2osAyi8s92At
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ac7b81317f52c182ed1482f7b2d06fe8_JaffaCakes118 unpack001/out.upx
Files
-
ac7b81317f52c182ed1482f7b2d06fe8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 124KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ