Behavioral task
behavioral1
Sample
d335ac5b9210f48f8b9dcc26f8c0227d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d335ac5b9210f48f8b9dcc26f8c0227d_JaffaCakes118
-
Size
86KB
-
MD5
d335ac5b9210f48f8b9dcc26f8c0227d
-
SHA1
43ce6c363cc93fa2cd166630cfbecd520402c550
-
SHA256
49520b11e34e7af7d864f4b2f6546b3b03d59d1729d2e966a09553d2cca98fd6
-
SHA512
ba183941f2aa1f921c73654eae4cc465c060d74801e6432f371ae8a8863fbf0ab4dbf7142bd8c0d1864d99b759b4ff4c010acbbf098453e1939d5d7db2ef7ccc
-
SSDEEP
1536:Lx7bIALxiysO0KBwuvHI8Y7DjG0HQGzHggsLLdRNSBEIjrkpaCQaQJ9yJU:Lx7UtyCsdQr60H9rwsBNjr2Q9JYJU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d335ac5b9210f48f8b9dcc26f8c0227d_JaffaCakes118 unpack001/out.upx
Files
-
d335ac5b9210f48f8b9dcc26f8c0227d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ