Behavioral task
behavioral1
Sample
d162e1c55f1a15b29e630d51138b23b7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d162e1c55f1a15b29e630d51138b23b7_JaffaCakes118
-
Size
28KB
-
MD5
d162e1c55f1a15b29e630d51138b23b7
-
SHA1
4e3a037dc1b65df7a1b5cb469df97fcd9b63ab35
-
SHA256
e5dac50cdf6d3a1ea628a7dd4d4174e7febea814037b052ccad9b8bf91dc1b9d
-
SHA512
883b9ab82ee09f6ff276508783d1a8998adf508608c52e5b64caf02978788d293f43c98617bd6c84ef645156d629df8b9ec281b62848b8c6737b59b254df7fc5
-
SSDEEP
768:AaMeH1xyxoTsC+S2ZWX1nQi+ii67if+bWC145B:7MIvyxs+SrX1nD2f+bPqX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d162e1c55f1a15b29e630d51138b23b7_JaffaCakes118 unpack001/out.upx
Files
-
d162e1c55f1a15b29e630d51138b23b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE