Behavioral task
behavioral1
Sample
be777b36f51f9e5e23e0b7c9b2734f23_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
be777b36f51f9e5e23e0b7c9b2734f23_JaffaCakes118
-
Size
14KB
-
MD5
be777b36f51f9e5e23e0b7c9b2734f23
-
SHA1
8ee74bbfe7eec540e4a46fd6e9fccf8bc629972f
-
SHA256
81e553fab89a8771486de8b04f933c2454ed04dfdbeed70589a8185dc96cdaa5
-
SHA512
fe4bf1625f172f7112bb772b58ee2d940732c32a21b9cd530a2326ab172cf84b5866cf1dfd8107334b72c71e9bf258cda166ee94ddc668a2af6b1a56e7c95650
-
SSDEEP
192:WtSTSkU8tzQ21Lt3fVuZOZo3qeY3wb9ZOTM72fV1XmnOEBFVuw3o+BKXAz11tM:WsTSkU8F9LtPuAQZyTTokw3o+BRa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource be777b36f51f9e5e23e0b7c9b2734f23_JaffaCakes118 unpack001/out.upx
Files
-
be777b36f51f9e5e23e0b7c9b2734f23_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 5.0MB
IMAGE_SCN_MEM_READ