Behavioral task
behavioral1
Sample
cfcdb2a5cc75629ffd16fbb777c2c292_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cfcdb2a5cc75629ffd16fbb777c2c292_JaffaCakes118
-
Size
117KB
-
MD5
cfcdb2a5cc75629ffd16fbb777c2c292
-
SHA1
12a04e88706e2bfac48b8b944c20e4814b0bf93f
-
SHA256
1b39b2d7eab0da15e14e18e284b0e0194e7e79b3d8f64595c214cffd6292da69
-
SHA512
d80000127e51095d88237ce7ac90efcfd6a580dbd5ae25fadf2dbb9b568cbfbedd4d5cbbc14291e1fa09ca0e0fd514cdb9db550bdc55372eb23f1add36800fa2
-
SSDEEP
3072:l0jMsbocs/UC56EuEGYOKtx3Xu3rjQUVaJJ0VZl:SYcg5vu8L3H/X0VZl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource cfcdb2a5cc75629ffd16fbb777c2c292_JaffaCakes118 unpack001/out.upx
Files
-
cfcdb2a5cc75629ffd16fbb777c2c292_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 96KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
CRT Size: 64KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CRT Size: 41KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ