Behavioral task
behavioral1
Sample
cfeb0e94f00f353c96cae760dc619c6c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cfeb0e94f00f353c96cae760dc619c6c_JaffaCakes118
-
Size
349KB
-
MD5
cfeb0e94f00f353c96cae760dc619c6c
-
SHA1
acfa08ae3d219ca7bf5c7c7d95822c5932ff2af6
-
SHA256
13c14ecfe2ca0fb4348b70feba0ab282d610ba566b718c6fbee402b24c62049b
-
SHA512
e2b91fdc558f3dca52b1c3cb9968af1f9d6f9b7055acbfcf43de675a52e5cd3a338dfe044a653df88afb4c1d61c80199689ba414e88d319571a1f837e374689b
-
SSDEEP
6144:oCCapvdL8UAluUv901Ysc+Y8ziFEiX93/R5AeEKye/k1r8kR/FFXwR3i9ow2/:oCC+1AluZHY6ZiN50Lr8kZFVS3t5/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource cfeb0e94f00f353c96cae760dc619c6c_JaffaCakes118 unpack001/out.upx
Files
-
cfeb0e94f00f353c96cae760dc619c6c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 388KB - Virtual size: 387KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ