Behavioral task
behavioral1
Sample
c78dc8cc7a643222ed3caeca3079756f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c78dc8cc7a643222ed3caeca3079756f_JaffaCakes118
-
Size
652KB
-
MD5
c78dc8cc7a643222ed3caeca3079756f
-
SHA1
b2614ca6de87eb7a3b45aa532f75603d35829271
-
SHA256
d58622508dff6cf7322f6aaf9e0c6075d94d683faeaf07f5808171cbbe78baa4
-
SHA512
edc1de0798481cb4b00a3d7fc80b8520084b1ee2dd5d43c26faca410b859c4d145b9b53d19e1a4db74caa912d3f171029cc7142a6b033e3a5a9aa1a9bb11929d
-
SSDEEP
12288:93/6MEoI5+JMg+3Ok3ed7AgiphkDr5vH7Kgtjv5kOyCm2XTpMJ:EP5+JMN3Ok3Xh7ihH7KGZmATp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c78dc8cc7a643222ed3caeca3079756f_JaffaCakes118 unpack001/out.upx
Files
-
c78dc8cc7a643222ed3caeca3079756f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 932KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 598KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 828KB - Virtual size: 825KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 204KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 429KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ