Behavioral task
behavioral1
Sample
d39fee2f9f33a476c22fa5b1d1929abd_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d39fee2f9f33a476c22fa5b1d1929abd_JaffaCakes118
-
Size
82KB
-
MD5
d39fee2f9f33a476c22fa5b1d1929abd
-
SHA1
125ae28bc09cae81283f26ff370391dddf9119d5
-
SHA256
18daf6fc0ec42ecc8969fd2bc916568a54c7fb172b59761310691e664042091e
-
SHA512
ef1001a8b8e41fe1eeee84dd615b3787a96e57c93402134806eabb11ae9918871f5fdb3e12d6f8f4e9530cef326b098b3d405f35d42962df63e626edcbf99ce1
-
SSDEEP
1536:X8hMJTnH7j9GAw5Hz3q5ZaQ5S/NTIphY8/68N1H/B/C:X8YTnhCza7K/d0l/+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d39fee2f9f33a476c22fa5b1d1929abd_JaffaCakes118 unpack001/out.upx
Files
-
d39fee2f9f33a476c22fa5b1d1929abd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ