Behavioral task
behavioral1
Sample
bd7469899a52507614cc6631bb3ed92b_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
bd7469899a52507614cc6631bb3ed92b_JaffaCakes118
-
Size
158KB
-
MD5
bd7469899a52507614cc6631bb3ed92b
-
SHA1
b26c807603c4320f2660a02760122d1be9bc0716
-
SHA256
87c79632f051ff149935d93e31e3be75da504424fa5559eb95919dc37640d482
-
SHA512
4c542006c47a172f43dc56da522c1f81eda6f388cbabca5fe7bea71d4c52cac3ee3fdf3c70c3d082de471d92f434e5d7bc6325dc055e1cf1ba1b22b6582b62af
-
SSDEEP
3072:Gyp18hdZYBLnG1o81P+1o2mHkDlr3eURzBb6JtVZHahN4lGV5h:Gyp3m+a2mHkZSuJ6JtVtKN4lGZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource bd7469899a52507614cc6631bb3ed92b_JaffaCakes118 unpack001/out.upx
Files
-
bd7469899a52507614cc6631bb3ed92b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 220B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ