Behavioral task
behavioral1
Sample
bc5764f03cf74618a55d1364630a5519_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
bc5764f03cf74618a55d1364630a5519_JaffaCakes118
-
Size
148KB
-
MD5
bc5764f03cf74618a55d1364630a5519
-
SHA1
010dbd835c545ad581861e4cdd343ffe4480169b
-
SHA256
4680248f244ff5bb262f270c7fda5f03f9c902dea006e30a41e0683d87e58aba
-
SHA512
5f87da83c23e057dccb83a9b991b231fee79c7d5ce1942506c244e3dd828e1bf36604f41e2c52cb82b41fb78493c13daefaa7dfe6cb996d521fe284f60b5941b
-
SSDEEP
3072:CAUVuWHIUBLKw4weIEcGyc5ajUXivBswzIchD4W/NmP:CABWHXpXeiBggBFzIc7Vm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource bc5764f03cf74618a55d1364630a5519_JaffaCakes118 unpack001/out.upx
Files
-
bc5764f03cf74618a55d1364630a5519_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ