Behavioral task
behavioral1
Sample
b814e1f412f5973ea60d46667bd81624_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b814e1f412f5973ea60d46667bd81624_JaffaCakes118
-
Size
83KB
-
MD5
b814e1f412f5973ea60d46667bd81624
-
SHA1
568526d81f870ab33e4382061274cd0b518a22df
-
SHA256
42d29712d847c58964adef66f5812bf08e734aed827247c1354702fe4e5b9a01
-
SHA512
c966e583e5f37e0d207a4fe726c4ea73408aa1954c6cb04bef72a373470f8b0513e69fc35f05df5cbb3e34987d7028c834d0d0fa5055152973320e2c19a916da
-
SSDEEP
1536:QUHk6PF6KDmtyTquivdTax5FvfSqJt+cyk6mx1y0/Hw+t79:L3PDmwD4FarpS9XXeWA9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b814e1f412f5973ea60d46667bd81624_JaffaCakes118 unpack001/out.upx
Files
-
b814e1f412f5973ea60d46667bd81624_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ