Behavioral task
behavioral1
Sample
af73934815f0d27f43405bfd42e24f40_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
af73934815f0d27f43405bfd42e24f40_JaffaCakes118
-
Size
130KB
-
MD5
af73934815f0d27f43405bfd42e24f40
-
SHA1
c3fd4cd3d6ad1c6e57e430a905f9b1fb907b7246
-
SHA256
8815e3362b6d74ae01684440d94f7985d7bbc9cf3adb71e8134fe1dbc2ec3d7c
-
SHA512
7bdabd11856a3e3696f144537d6193fb14b667d8f7ca259c66198d5195374d620e8fbb1c70ade0aafac33fe91eb84c610d055fed7723296a9c24fd980c457b79
-
SSDEEP
3072:+7b3eXiI8fvzRHqLNDNKR12rHeqp9aV/mnF0dv6:+7Nfb4LNBaMr34aeZ6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource af73934815f0d27f43405bfd42e24f40_JaffaCakes118 unpack001/out.upx
Files
-
af73934815f0d27f43405bfd42e24f40_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ