Behavioral task
behavioral1
Sample
d43bfc39e16a52b8a36bc9d40f68b521_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
d43bfc39e16a52b8a36bc9d40f68b521_JaffaCakes118
-
Size
91KB
-
MD5
d43bfc39e16a52b8a36bc9d40f68b521
-
SHA1
55fb7ddf37a7593f97379ed0a46f78d3cb261526
-
SHA256
c9ab9cfc34e1faef65cc375bcdd405f38ff2b37afbc8256ac276b22c3ad9b40c
-
SHA512
3793b3a8bae9c8e9e09d768d012e6a319e02ee4e6e8152bdf554a9ab506f809c6e1ee3c8914c662eb852fd26aef495d6f8524c39e12b4a9aa1bcd343f6f3feed
-
SSDEEP
1536:E0MyGu9xCCOVtyXtN0Pl6fEqBlKhRXpckjmDuyGRp6neFUsab6E0Qtcmhsfv9G:E0M9YCXrDsfEUKeomSse6sab9Ttcm+f1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d43bfc39e16a52b8a36bc9d40f68b521_JaffaCakes118 unpack001/out.upx
Files
-
d43bfc39e16a52b8a36bc9d40f68b521_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ