Behavioral task
behavioral1
Sample
daf5098719a275931f3ba50c1b026335_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
daf5098719a275931f3ba50c1b026335_JaffaCakes118
-
Size
17KB
-
MD5
daf5098719a275931f3ba50c1b026335
-
SHA1
bee87b7f3b34c4acd325f673917c7700fdac4e4e
-
SHA256
9255e742ebe944e16a95bdc5b9388f23806a732e96a3e1aba3f08ac1be5214aa
-
SHA512
e315c614175c9defd1b8c6f075d65c460e19bfe99f939e31d4894b862f6836c32b9ab4ba9b820c0e7891092f42398923a3f35cbb7712805b4a93d2d6a58f8c40
-
SSDEEP
192:TYXQLrkrtjyAatPeXpi/lLkXN2FycsZGhvPzKQvZ1V+HhOc18ERTl3+ntcRxfGgH:TYXQvAgdBFFhHfV6hHRn+tcRxbC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource daf5098719a275931f3ba50c1b026335_JaffaCakes118 unpack001/out.upx
Files
-
daf5098719a275931f3ba50c1b026335_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE