Behavioral task
behavioral1
Sample
b604567d9f4fd6472d6c6e7529347202_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b604567d9f4fd6472d6c6e7529347202_JaffaCakes118
-
Size
29KB
-
MD5
b604567d9f4fd6472d6c6e7529347202
-
SHA1
f9a4b7b2dba6e937f6b62fce79b03eebf4f03f75
-
SHA256
86914731b3297494adc123ebec0872a0d350689b6ffd2056e9f4b87399370cce
-
SHA512
182c4e979350e5d73b01c8ea2a196014d3889cf8fd290ef67e9ccc30f4389c217d030a4f93c574b2ee99b9c06782dadb5e4a33e7ab74f6f22a50dcfb5498b7a0
-
SSDEEP
384:83i5nnYyYBrW7vJassx/zmnYdFh2tictFM/hMh3LycN6d19BK6kMYMk//jj/wt92:D5oh6JassJstiQFeWya6dgfMM//ILx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b604567d9f4fd6472d6c6e7529347202_JaffaCakes118 unpack001/out.upx
Files
-
b604567d9f4fd6472d6c6e7529347202_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ