Behavioral task
behavioral1
Sample
d14ac10d1bdc0e754c2c0d97b62e5589_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
d14ac10d1bdc0e754c2c0d97b62e5589_JaffaCakes118
-
Size
13KB
-
MD5
d14ac10d1bdc0e754c2c0d97b62e5589
-
SHA1
0389eb8f692d7690b37d8b1a54111afdcd7a2c8e
-
SHA256
90495931509e43c12e5743b1a4c1feb024842842e5219c5f572fab497c9c0c03
-
SHA512
0b811f507c009277a3131a2897af1eb7e2ac89975647acd92980a5180bf1642223b404f5ae29f101f60c86107bb8462ce26c8ac8e8c9bf8c595ebe7ff04c87cf
-
SSDEEP
192:TNb6q0z9dyDOKA6B6EFZGX8riwBUIVVoTG1SWEDPziiezHKoqvfg7APhbyIXkqp2:TZF0z9EJG9wvV6TTlPYzH447UgI1Mf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d14ac10d1bdc0e754c2c0d97b62e5589_JaffaCakes118 unpack001/out.upx
Files
-
d14ac10d1bdc0e754c2c0d97b62e5589_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 978B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE