Behavioral task
behavioral1
Sample
c8b4576ee665bfa1712c3d79d6805230_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c8b4576ee665bfa1712c3d79d6805230_JaffaCakes118
-
Size
443KB
-
MD5
c8b4576ee665bfa1712c3d79d6805230
-
SHA1
92fb8458fef7e1046850df829123cade3db806d2
-
SHA256
a8ac1b9a2af9bc6a481e0a6df276ca9619bd30288486f24b50b11b7615fa8499
-
SHA512
1ce00050f0ecc27750055e35cb9c21fa1c3739a7b4286f79b9cac9c901af21ed2763ac85c49c3964ae22fe11267be166fa5f6b3bdc2555ab8ca1488a5bdfd34b
-
SSDEEP
6144:8/lJ+7+ZBjtZTbi73xoI1uz0Hvsv3b0/xFW2mDdU5Lz3R1ULk0id6v:8jSC9t1U3VHvgbuHwG5LnUdt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c8b4576ee665bfa1712c3d79d6805230_JaffaCakes118 unpack001/out.upx
Files
-
c8b4576ee665bfa1712c3d79d6805230_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 439KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 333KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Qy8VZ8aO Size: 189KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idat_73 Size: 117KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ