Behavioral task
behavioral1
Sample
b1f92b981b49ee145a47469e18fdafff_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b1f92b981b49ee145a47469e18fdafff_JaffaCakes118
-
Size
591KB
-
MD5
b1f92b981b49ee145a47469e18fdafff
-
SHA1
5147cf257d875e3c96ad35a9f9892eb506be0f97
-
SHA256
1f770415b3fe659fa48085a5ab381dfc97bd04425799525d366a2ece65458774
-
SHA512
63cc333f39e1f325924e9059775aa9dca088a94724ef03361b854a91af04eae7e7995a049a210864caa067ee7a05763ea4ddcc0c367e8ecfa5158d1a3133d9a8
-
SSDEEP
12288:fGvD8feU7GxkYOIOzUbKcaT98EXT5Eufm8qXdlAlwsTmsE:+LEeEGUIOQxeZ57Itlswsa5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b1f92b981b49ee145a47469e18fdafff_JaffaCakes118 unpack001/out.upx
Files
-
b1f92b981b49ee145a47469e18fdafff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 473KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 436KB - Virtual size: 433KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ