Behavioral task
behavioral1
Sample
b72cf229b8e24209ae09372a649ef9bd_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b72cf229b8e24209ae09372a649ef9bd_JaffaCakes118
-
Size
378KB
-
MD5
b72cf229b8e24209ae09372a649ef9bd
-
SHA1
c066ddf6c3c5e505e5580ef405e0f37bb55593c9
-
SHA256
cf537c39cf6003d464792fbcd858a37e0fecd630348bcab2be7b00bf7882ca54
-
SHA512
2c5adeb0d7c8f81efb83c7dd26baa8d188501c6b550737f88dd48548010838a42f28fcf4f928cc1fb12efab511197b8d57f4158d0aed1fa3a67f72855d709e72
-
SSDEEP
6144:VOTIuN0h37AB7Uw6boaNzNKIZ1X967+YIbF8YlQI5jETjWZdoUVhKwtU:VOTIycAYEeZ167RIWI5Se+kU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b72cf229b8e24209ae09372a649ef9bd_JaffaCakes118 unpack001/out.upx
Files
-
b72cf229b8e24209ae09372a649ef9bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ