Behavioral task
behavioral1
Sample
d60effb5c0db0b1961b1f3abf1abd03a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d60effb5c0db0b1961b1f3abf1abd03a_JaffaCakes118
-
Size
82KB
-
MD5
d60effb5c0db0b1961b1f3abf1abd03a
-
SHA1
72090f8c98836e94c41e62d60f4650f32d967670
-
SHA256
158c904e40bad52a11cee08d457b019b9edebb70a3e2f060ffcbafd1828d56c7
-
SHA512
8d496c052ed03d44e6376ebae7708a215b5b5f1374b0ccf291cdc97e1dead81e49e3228f909065f4736a2cbcb2a2c74ad357adaeb963bf53081ed994f0008db4
-
SSDEEP
1536:/bAu6NJ9WvzWP9E7gKbToxzOc4W5aSMM787TmFMrQn4G+G:/bwNJ9W61E7ga0cmft7LmOvL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d60effb5c0db0b1961b1f3abf1abd03a_JaffaCakes118 unpack001/out.upx
Files
-
d60effb5c0db0b1961b1f3abf1abd03a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ