Behavioral task
behavioral1
Sample
d3ca4ad1d3514600b992b8027326095d_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
d3ca4ad1d3514600b992b8027326095d_JaffaCakes118
-
Size
103KB
-
MD5
d3ca4ad1d3514600b992b8027326095d
-
SHA1
f0f8ba7f70892253262d1f7881dc6365f89ede9a
-
SHA256
a7004068f8d3d01938d9c21f5d1a6144744c4439e719242e00ba180aa118aeff
-
SHA512
6eb1a79d5e73df8d93ef19e20bee305f6f1801f29ce6d6aaef628d1c34e09208a441bb0b41a3e93d36ff7666dba5234ad95e7379374d2a49a7b4197882ab8a90
-
SSDEEP
1536:YEPXdSxxU3uoqR7mA7ZV/0gUnzzWGLyo5pTr2yUCx8FPzjwayGBkg:NXdSxeYnB0f/Fyo5pTr2ypc/FyG+g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d3ca4ad1d3514600b992b8027326095d_JaffaCakes118 unpack001/out.upx
Files
-
d3ca4ad1d3514600b992b8027326095d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE