Behavioral task
behavioral1
Sample
ae61044ab600513aacadb883013810f9_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ae61044ab600513aacadb883013810f9_JaffaCakes118
-
Size
160KB
-
MD5
ae61044ab600513aacadb883013810f9
-
SHA1
2e5470a9244f4591f1735abc0af6735b6a9338b5
-
SHA256
c0113b3c08776ccd9c89fe81e8412e670e437588237cf79b0b90cd81e5162c2f
-
SHA512
c5838812eb0208b669e15c07cce91e307ab88546b448a6c06f040a74d5afa884af7dd00f1d8820a324a9b5de3d7377b93797582ccb0f07394bb8762595e24301
-
SSDEEP
3072:zFaeT6yu9C3bVzr9nudCRF0C/PygrIT0vswLsEik7C635QRG6v8iwnjXb//jIK/b:zFas6yiCrMkx/PVwczLsEYyQRCjXbH3/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ae61044ab600513aacadb883013810f9_JaffaCakes118 unpack001/out.upx
Files
-
ae61044ab600513aacadb883013810f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ