Behavioral task
behavioral1
Sample
b612925ed077f997d1adc85480651cb1_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b612925ed077f997d1adc85480651cb1_JaffaCakes118
-
Size
71KB
-
MD5
b612925ed077f997d1adc85480651cb1
-
SHA1
dc124763bff54cebe05371c98b2430c989039438
-
SHA256
3706b4c724ca94d7f38cabb0f9724112ccdba73757f18546b70e26ed35fd49a6
-
SHA512
b183819883f079ead0200a834dd1db24cf7c78309d1fc8055718375c7a611387dac774036591855ceca3d7bc0946ea3bcb9941babf780d9b3d4da07a0c88821b
-
SSDEEP
1536:Y6EoPY/EaEm4ZExwwZhG1dmsNIAsMNAjqW/0mmACUb64uM7vrLNGsz+/BCXf2paX:YzR/EfZhwZheNIRM6u+0ro6Ww
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b612925ed077f997d1adc85480651cb1_JaffaCakes118 unpack001/out.upx
Files
-
b612925ed077f997d1adc85480651cb1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ