Behavioral task
behavioral1
Sample
dba938da217e84374b4328240ddf9af5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
dba938da217e84374b4328240ddf9af5_JaffaCakes118
-
Size
18KB
-
MD5
dba938da217e84374b4328240ddf9af5
-
SHA1
ba41ad9236e2155177201fb33bc13628988e1799
-
SHA256
acca2af7e073b279dbafb4e4e893518c78bbcb7da8290608e5103f6f953978ce
-
SHA512
f72b2d8e845972495f5ebe5b6c4a055832405c527841b1ee68e685a2cc3175037a136ee729142c2c2c2978e9e22815d08f0abd5589a5ee661c661d894898864a
-
SSDEEP
384:Ld6gB3AOzuO106w8+lOq718ulyrjbXfPcxcxQGdFn0RB5:hWOKpoj01mLkOQG30RB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource dba938da217e84374b4328240ddf9af5_JaffaCakes118 unpack001/out.upx
Files
-
dba938da217e84374b4328240ddf9af5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ