Behavioral task
behavioral1
Sample
ade4fbff373d14692ca1eb8baa1440a5_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ade4fbff373d14692ca1eb8baa1440a5_JaffaCakes118
-
Size
93KB
-
MD5
ade4fbff373d14692ca1eb8baa1440a5
-
SHA1
994325974dd325e0caad21c2ea614dd5b429d12c
-
SHA256
b1af7481bbbb116668438d59cdd41d5650b7f5ed2392ee254240a10260d9f29c
-
SHA512
70dd346fe443bda0ab0968da30ab835a12839e9e8504738dca8c03420406ad95126fdc02bd972d8a730fdb2d8896f8d8fb43f88f83c30f40e2b5248c579d5cc6
-
SSDEEP
1536:ATfDZElbf8R0j1CrSKwtoPU0C7aN8SQ3mUZR6t9Xur+cKl8X6MqxXbPDXY+2:A/KlwkOPwl0CmN8SQ3m2IDXII8X5EXbn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ade4fbff373d14692ca1eb8baa1440a5_JaffaCakes118 unpack001/out.upx
Files
-
ade4fbff373d14692ca1eb8baa1440a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ