Behavioral task
behavioral1
Sample
b6f09f7a690ab600a9362952e2de2d0f_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
b6f09f7a690ab600a9362952e2de2d0f_JaffaCakes118
-
Size
192KB
-
MD5
b6f09f7a690ab600a9362952e2de2d0f
-
SHA1
0728ff3408a8377d87acaf2e994f8cde769a1fa6
-
SHA256
0ad70e2b3eea7d8d95a1031ec8febc12dfaa46a5e908ae7f0569005480ef09cc
-
SHA512
a4a3ca6ff9fe135a8f7b7f63d01e9023c3eab5ec31fe66219cbf7175ec5da78bf5beab01dbb4349c792b27766506b3fb083827a1d470d13d812ec7737719a079
-
SSDEEP
3072:6sNcnoKCcmNzDBCGCZjyqSvADyW0AGhB0204FntOdmUh9ypamSQwJWVbc2uyEfAy:9cnolNnNCgqwkyW1G4275wh9YrmJgcww
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b6f09f7a690ab600a9362952e2de2d0f_JaffaCakes118 unpack001/out.upx
Files
-
b6f09f7a690ab600a9362952e2de2d0f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ