Behavioral task
behavioral1
Sample
d58debdffd524f1bc93d34930f81776c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d58debdffd524f1bc93d34930f81776c_JaffaCakes118
-
Size
41KB
-
MD5
d58debdffd524f1bc93d34930f81776c
-
SHA1
919b3f10e752be338506cb55d6ec9c3f624118fa
-
SHA256
7d242720902f443871e3f23f3f2fbf31003604e6ae66ee28f4df540dac93d345
-
SHA512
e8788b10ee5cbba971be61e9573a184a9a9d1eb2d6890b010c3e884b7dcd4b680e6ecd59fd9b0db271959d86a946454d43665800a585b952d40c3271bc03d18d
-
SSDEEP
768:JDL3rR6BP7egywkhwX9uBRc4p0Hq11khYCumvyDOXpatG2OFwA4ySpNQZ1c0YEn:J33rYeHwkDRxmHq11kmCTMfc2Ofn4CZN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d58debdffd524f1bc93d34930f81776c_JaffaCakes118 unpack001/out.upx
Files
-
d58debdffd524f1bc93d34930f81776c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 106B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE