Behavioral task
behavioral1
Sample
c07b5d3023d0467a2f2b6e4f3fe9d678_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c07b5d3023d0467a2f2b6e4f3fe9d678_JaffaCakes118
-
Size
222KB
-
MD5
c07b5d3023d0467a2f2b6e4f3fe9d678
-
SHA1
16dfd627dd395d263cdf815d797eb86e73fd7f31
-
SHA256
27c5a43483d314eab544f057a0b6222ad04fdad600d3e463eceab01fecf1f282
-
SHA512
7d9705ede07b23562a6cc95d22a9b74ae36eb08e73e08603325e1520bee743400a107408651bf09408310298ddfbaa8092643f12a90f8a825f2df254a046bb47
-
SSDEEP
3072:5x8+3bPshqPCHBFWTGuO0c9YHg5WuYKbhN4eGcYTRXiV0vEWZDIAk0B2YHX6M4Y:5e+3w0QKON9FvYKlNCcYYOJwC6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c07b5d3023d0467a2f2b6e4f3fe9d678_JaffaCakes118 unpack001/out.upx
Files
-
c07b5d3023d0467a2f2b6e4f3fe9d678_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 357KB - Virtual size: 357KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ