Behavioral task
behavioral1
Sample
c00dd6624ec86878cf2313a5ece141e7_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c00dd6624ec86878cf2313a5ece141e7_JaffaCakes118
-
Size
2.1MB
-
MD5
c00dd6624ec86878cf2313a5ece141e7
-
SHA1
c79e94da3298d68c4077cd448397674f944e3240
-
SHA256
1dad59b9ef7eba2fa5e5cd3b04f8932f7acf24e00ba2cb4bc06b6254beb1e8c4
-
SHA512
a8d79d9b45663a47b9a87325c0f6fae8a3adf3184a497fa82a1811428e8bd8651ae61b48b014634e6a3521dae3342921fc77702acfb41cf2dd8d8643156c3c59
-
SSDEEP
49152:L7nnccqgUtIaSIbaMQo+Y122I2jfjpT/iz9gBUZZ0GWMrhkM3XZgDZ2+OHQj:LDjGSITrw2Z7jpbiWcZ0pMFki6Q+j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c00dd6624ec86878cf2313a5ece141e7_JaffaCakes118 unpack001/out.upx
Files
-
c00dd6624ec86878cf2313a5ece141e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ