Behavioral task
behavioral1
Sample
bfe435f05e99ce309a00e8cda4666bfc_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
bfe435f05e99ce309a00e8cda4666bfc_JaffaCakes118
-
Size
1.7MB
-
MD5
bfe435f05e99ce309a00e8cda4666bfc
-
SHA1
68caf2655b6244c9d860744fbb312664e582012f
-
SHA256
9bd8d77e421f46c20c64021c5dc7e97e9c0cb0ec1a1ef2f6a8fe89a0a32db2d8
-
SHA512
1b8708a4a7eb3f34aed36acf8fceef187cc03e777ca615bc3a50dd2fc79086885549e585fc4098354560cffec6e40ad57209b0463755dbef9a940e78edc06467
-
SSDEEP
49152:/+MO59YwIhBWqr2zwQvaZ160Oocw3DS0GVd7Nx:mMO5Ncr6XyZMldwnGV7x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource bfe435f05e99ce309a00e8cda4666bfc_JaffaCakes118 unpack001/out.upx
Files
-
bfe435f05e99ce309a00e8cda4666bfc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 972KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.7MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 820KB - Virtual size: 817KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ