Behavioral task
behavioral1
Sample
ce84bdce963ee136aa025dcfe1289437_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ce84bdce963ee136aa025dcfe1289437_JaffaCakes118
-
Size
93KB
-
MD5
ce84bdce963ee136aa025dcfe1289437
-
SHA1
7bc669380e4d1485bca890b57db894f55e95209b
-
SHA256
afcafcaf839e3adb6dcbf1887fdfbab8dd0b07ce5f5aa9872e0c1b365bbdbf25
-
SHA512
2056910ae48dc545631db126c0f0d197127990bcd55f482df9e2c7f615699305b5d367055b01da033fe5187695ef9fb77261f098dfe0427b0218e8e68ae2db46
-
SSDEEP
1536:3AM59XKaPn4Q9cvbZjyc+UJ0XctAdju5/UoEzfU+EdWhi+bkkl1f:tzKaPnevlyc+LXctkq5/V2jhzf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ce84bdce963ee136aa025dcfe1289437_JaffaCakes118 unpack001/out.upx
Files
-
ce84bdce963ee136aa025dcfe1289437_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ