Behavioral task
behavioral1
Sample
da1e1ca05919acf6dcdf7837ccea7d5f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
da1e1ca05919acf6dcdf7837ccea7d5f_JaffaCakes118
-
Size
246KB
-
MD5
da1e1ca05919acf6dcdf7837ccea7d5f
-
SHA1
4dd4c698754edcdd654ec95543ed733fff5431d3
-
SHA256
6326e20c1fad02ab0d082edff2fb21e5a08a5b3eaa3a5a206858bcb164928867
-
SHA512
a23e45f8718daf0fb76221f2b8c833a6519da67e00a8510e7f076e50360a54397c9fb359d92038ec2cfe94384f565da72dc2ced33134007c685e5bd4f2d43df1
-
SSDEEP
6144:JnYHmh9rNg7H+Li6Y6N8AYC1AqiBba7aCHm+fP:iGh9rNg7nAYC1AqGVQnfP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource da1e1ca05919acf6dcdf7837ccea7d5f_JaffaCakes118 unpack001/out.upx
Files
-
da1e1ca05919acf6dcdf7837ccea7d5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 404KB - Virtual size: 403KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ