Behavioral task
behavioral1
Sample
ada92d31e0ca4277d9d8862edc7f6af9_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ada92d31e0ca4277d9d8862edc7f6af9_JaffaCakes118
-
Size
133KB
-
MD5
ada92d31e0ca4277d9d8862edc7f6af9
-
SHA1
cfe4f01274f0c3c8db127ffe66e8eecf80e54c70
-
SHA256
e80910f0b99574880d40e08ca951058708b8d476b3ce5aee34e1904fefbb92a5
-
SHA512
c2ee139ea44a5eeef6de484ac7bd52ee6de3098f3f1b9b6d886854a22ec927114cdd92031f7b2f2b7d84e195715d3d66181425ae78dfc4949c3f15c907a998b3
-
SSDEEP
3072:mJzktt1k54OTenbVHf1JnFVcyR0vusej3RiRjXCOTSrx:mJUiwNtjsusejh0jSO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ada92d31e0ca4277d9d8862edc7f6af9_JaffaCakes118 unpack001/out.upx
Files
-
ada92d31e0ca4277d9d8862edc7f6af9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ