Behavioral task
behavioral1
Sample
bbe46d204cf3af77973b32eda615e257_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
bbe46d204cf3af77973b32eda615e257_JaffaCakes118
-
Size
438KB
-
MD5
bbe46d204cf3af77973b32eda615e257
-
SHA1
fac1e830190242518f0f027de4cbaf8316a3c0f5
-
SHA256
3419af0b20f3f4d672dde661e4c7f3f33127388c65484bb0b1b22a9331f44110
-
SHA512
3f1c757660ffa5a8c05ad344c6ec05596af8084af01a150754fdfa49f5e69710ca2b4b5ede64de7df2f08efb27bc073a065e288466e4cc306f0460b4a4e10dc4
-
SSDEEP
6144:5knN4CVUIm6uk06ZLYgvBA+8xmrxgmA+3cclptVopA3D7bArJ2CWw4OD5qsLP2sS:+nNhuBoY8SorxgmA+nlvVl3UD1mD
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource bbe46d204cf3af77973b32eda615e257_JaffaCakes118 unpack001/out.upx
Files
-
bbe46d204cf3af77973b32eda615e257_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ