Behavioral task
behavioral1
Sample
c0ab63a5e1405c03e03fc699d00abdf9_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c0ab63a5e1405c03e03fc699d00abdf9_JaffaCakes118
-
Size
247KB
-
MD5
c0ab63a5e1405c03e03fc699d00abdf9
-
SHA1
55618eda3e59be4a7ed39b6f5636dd4f07571b9b
-
SHA256
87b35b4612ec54fe05cbfee2f79e630a357f4e71d6233d0d3ed7178fd59a111d
-
SHA512
753721be46fcc39dc096dd5a86c7f9d12ab042c007680b947b72a3681c108591e0d52683168bd483b509fb119a4701d61a4ac6e1fcf03309a374cf1489619575
-
SSDEEP
6144:ohe1YdOiqYG/G90SL2AGT0o5+EgMMTgu1ITYN:D1wOiqYGZmGT55+hMM0nG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c0ab63a5e1405c03e03fc699d00abdf9_JaffaCakes118 unpack001/out.upx
Files
-
c0ab63a5e1405c03e03fc699d00abdf9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ