Behavioral task
behavioral1
Sample
d22da0d107d456248e94481d5e2f7fce_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d22da0d107d456248e94481d5e2f7fce_JaffaCakes118
-
Size
268KB
-
MD5
d22da0d107d456248e94481d5e2f7fce
-
SHA1
5d91ff2edad27d7492d03ba40e3ce43f1a950ce5
-
SHA256
b5849211cc8960303afa1d2099edf7b89a2d15b78387ffd99cd2a1a32f5e1301
-
SHA512
eb6292289a83f99321bec436f66d937ae1a623a24e72480a4fe515f83af8ce0058923ee4cb4f484a33fca0529c325e5eaca014eafbde1ae103db8ae490a5cfcf
-
SSDEEP
768:ae2gSrV3GpO7XjwMU8Cy/j6Be2gVe2gSrV3GpO7XjwMU8Cy/j6Be2gVe2gVe2gVB:0rdHEJ8Cy/RrdHEJ8Cy/zrdHEJ8Cy/J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d22da0d107d456248e94481d5e2f7fce_JaffaCakes118 unpack001/out.upx
Files
-
d22da0d107d456248e94481d5e2f7fce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE