Behavioral task
behavioral1
Sample
ce3231e6c2283094cafdb738565ff062_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ce3231e6c2283094cafdb738565ff062_JaffaCakes118
-
Size
1.2MB
-
MD5
ce3231e6c2283094cafdb738565ff062
-
SHA1
98a4545960953895f064d491737a8184f14b39ea
-
SHA256
768ad0a053e6c7600d6b49c9c7e0de1180696ae920e4fbfcd595d781097535df
-
SHA512
a2d4d06e67dcf30ccc782d88b63a79a2fc6ef3dbd1bc69d9af48ee3d4190bb1f2b0e283a847e834d0510aea3f2e85929e4e1d0fdebac5571a078140067c8dee7
-
SSDEEP
24576:uzVg0RA2y+IZxcnjj9LDD9qe8WNNcJvQ0374Y5KOe26GFUwENx:udRA2FIKjvqe8WsJvPL4Jg6G/4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ce3231e6c2283094cafdb738565ff062_JaffaCakes118 unpack001/out.upx
Files
-
ce3231e6c2283094cafdb738565ff062_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ