Behavioral task
behavioral1
Sample
b6c0ef4fef6fe15be0caf1be8890e60f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b6c0ef4fef6fe15be0caf1be8890e60f_JaffaCakes118
-
Size
119KB
-
MD5
b6c0ef4fef6fe15be0caf1be8890e60f
-
SHA1
17fc11584b464e2d28bd4bf173d82bae3fd2f459
-
SHA256
c911265dcb3e43cf6df647c39703212018353adf75a8d28c0dd59b19ce9dba36
-
SHA512
25022444f434c485b2c2a55e3beb973e8da0f45e8595e0b404084691d3a96bc323fdd0dab4947cf857ab45fb992b0421237d67068a70734b5a62f4d600b8d35a
-
SSDEEP
3072:laP6IT3/oxwHJ8jhnM74cQwuT7lAJN9y4bhgYzH8w:UP6WoxwpwhetHbhgG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b6c0ef4fef6fe15be0caf1be8890e60f_JaffaCakes118 unpack001/out.upx
Files
-
b6c0ef4fef6fe15be0caf1be8890e60f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 976KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 180KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 839KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ