Behavioral task
behavioral1
Sample
afe186fcdd6a7d979514c495433d9db4_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
afe186fcdd6a7d979514c495433d9db4_JaffaCakes118
-
Size
29KB
-
MD5
afe186fcdd6a7d979514c495433d9db4
-
SHA1
067dc5932bc5706c6333ce0d95864180b9abe81c
-
SHA256
bd68133a4fa1771fdb90dba50bcf959a75393aec50f3c86f6cf9bb61040ff85e
-
SHA512
57b8ba2196b538a194d5e7695bbd54bc814afa84efc83bedbb06106b42354292c6ff0d805c82c6bd1bf821f106f0eba4414624a348f6784d13576e1f6bb25aba
-
SSDEEP
768:3Ef3gm63o1mFTKTUmvcSZRk49SvhLWngIVop:30lgKjv3S9WngIa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource afe186fcdd6a7d979514c495433d9db4_JaffaCakes118 unpack001/out.upx
Files
-
afe186fcdd6a7d979514c495433d9db4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ