Behavioral task
behavioral1
Sample
afb350bb789b91f5970d33c214769941_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
afb350bb789b91f5970d33c214769941_JaffaCakes118
-
Size
566KB
-
MD5
afb350bb789b91f5970d33c214769941
-
SHA1
b0d598ee7b8f9c2a2d82a58570bb23f4a31a3be6
-
SHA256
59ad96de75cee074712daedd21f37d899eb88a3ac4d563a0af55262870e91824
-
SHA512
dded86f63a3eeda358b0419be6adec62d4e32b0025e6bd6643a2fb15c19a4e14209edb0f4fd0be36618900a349ceb993e3c25bcdc16b55b47c2273f2befe6b4d
-
SSDEEP
12288:SJL4XXcKL6zjLeO8yKo32Xd0AcmKLuxEKd0BJiKynmBg5:38KLo2eAcmKLikJiKNG5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource afb350bb789b91f5970d33c214769941_JaffaCakes118 unpack001/out.upx
Files
-
afb350bb789b91f5970d33c214769941_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 538KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 528KB - Virtual size: 525KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ