Behavioral task
behavioral1
Sample
aed203c7b6b652c374a391fef56f9dd7_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
aed203c7b6b652c374a391fef56f9dd7_JaffaCakes118
-
Size
21KB
-
MD5
aed203c7b6b652c374a391fef56f9dd7
-
SHA1
8433566135762fdc082df2e36ade1ce8c865483a
-
SHA256
35d7d69e787e1dcea33f961574279e400ef1b5009f8ea0747a0ea5f85fcfba41
-
SHA512
8068dd79effaf83b90d7b9b83cdceb6bcd4e9a3b011804005bd56120359a6e20541ff804cc8dd46cf088dfdceeaa6ff353f65a7d5ef5dc12ce0bd4ccb7d73d37
-
SSDEEP
384:1+JHp1pjlvP1hzbr7W1enVuJmrqaa6KtWifTLm7HIHkSjs:EXV1BbTA6KtDf8oEM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource aed203c7b6b652c374a391fef56f9dd7_JaffaCakes118 unpack001/out.upx
Files
-
aed203c7b6b652c374a391fef56f9dd7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ