Behavioral task
behavioral1
Sample
d54b26fdf44234e2c501ebe2f23ece55_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d54b26fdf44234e2c501ebe2f23ece55_JaffaCakes118
-
Size
213KB
-
MD5
d54b26fdf44234e2c501ebe2f23ece55
-
SHA1
2fa705144aaf1e023480a4e7ee07a6d4fb8da704
-
SHA256
ac4407563f2c87c1af6d106a3b29d77bc9339cc997ef83e692cad3a3a2e96f3f
-
SHA512
3cb01825232f6cfe4f0fb0c029ebf378ecaf99663a2490b69877d58a829b0396284686628d2bb9cc90018c36a2fd6eb60260b3e330f01e6cd92a81a6aee14e47
-
SSDEEP
6144:HMzzILGFkzhr0pGj9oDNJ7tspUfqWgfe8RJm:ncoqGj9oD2hHfemJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d54b26fdf44234e2c501ebe2f23ece55_JaffaCakes118 unpack001/out.upx
Files
-
d54b26fdf44234e2c501ebe2f23ece55_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 343B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ