Behavioral task
behavioral1
Sample
d2805dab24ca082607519b90c6728d96_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d2805dab24ca082607519b90c6728d96_JaffaCakes118
-
Size
170KB
-
MD5
d2805dab24ca082607519b90c6728d96
-
SHA1
c564697d925efa275e3d6c39aac53ce68e4856aa
-
SHA256
eb87abb097d678cd31aec01a34d255b1896b8d2fceed8b6ce58e632215df3ca6
-
SHA512
0271a685c6696672382c5aed7182942e3ab81bde3a369042050a69a13713cae2d7b1ea95721848f63808d85b367408efe2bac07fdc84c624a5b780f9a64b013d
-
SSDEEP
3072:3f41bglo+FGU2NxmlAGED3p/BOpecb4Y4ZN6rH2WcWo8WGG:v41clowbAT3p/Bcehxerpo8WH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d2805dab24ca082607519b90c6728d96_JaffaCakes118 unpack001/out.upx
Files
-
d2805dab24ca082607519b90c6728d96_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 157KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ