Behavioral task
behavioral1
Sample
c17de0600ddfefe25cf5e4917432689d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c17de0600ddfefe25cf5e4917432689d_JaffaCakes118
-
Size
71KB
-
MD5
c17de0600ddfefe25cf5e4917432689d
-
SHA1
f57208d701755a0e79489cd75df9bf96d8db7988
-
SHA256
be43b8fe3d9e7d070a657cb029ec576ffe4aea742777ee0f9f9c095636d43219
-
SHA512
2cdf8fec6b52f4865cdfabd364f3d586a11853e7f1f4fab6967e1e7560c500b1f2f2d607ca9c67aa762928767962506c770a82d86c6e13d79445bd7ebeb7f47f
-
SSDEEP
1536:i++gkVXJuvy5CTqZXrcQHfZzBDrrjwdsRZuKO3DhS8fkrb0ssqg:i++ZJ5oTmHnUdI5O3I/Jsqg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c17de0600ddfefe25cf5e4917432689d_JaffaCakes118 unpack001/out.upx
Files
-
c17de0600ddfefe25cf5e4917432689d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE