Behavioral task
behavioral1
Sample
bdbf6c10e71597ba233692029655118c_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
bdbf6c10e71597ba233692029655118c_JaffaCakes118
-
Size
13KB
-
MD5
bdbf6c10e71597ba233692029655118c
-
SHA1
0a5a4872c1a4671862ffa1b48f235c436c13ca92
-
SHA256
a57a6ec49f3d356d43926b67e3d82b80c848021d84260f63882f007df1713906
-
SHA512
8be26fe31e644abf62cfbb145e6ca5f932d6b82efb1dce1f8a9dc36bc2efedcc9b87b9ea3c4ce4cd3f70b0da13e79b07c8d13115c512818f1323f733aad544b4
-
SSDEEP
384:kJDakie4v2NrzXXDht3SeICQvFw79NVlt/+g:M+XilDSeINvi3tm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource bdbf6c10e71597ba233692029655118c_JaffaCakes118 unpack001/out.upx
Files
-
bdbf6c10e71597ba233692029655118c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE