Behavioral task
behavioral1
Sample
dbd488ba2532e57c3a72d57293a5ca41_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dbd488ba2532e57c3a72d57293a5ca41_JaffaCakes118
-
Size
59KB
-
MD5
dbd488ba2532e57c3a72d57293a5ca41
-
SHA1
620bb663c460f5dfea5c2cc7f55c04f2b600196e
-
SHA256
e686974aa98c1e955deba5f7f13b64aef3c287a9008c5ada3f1d80e3cb38f17d
-
SHA512
c9d89edda281a6fc65650fe94ce9c68b928638b0b4d9eb5cc48e3dd233f3ba873cc6f76cc0e49356f61e24ba0dfb725670d4e506b1319d90fad1b890971f3ddb
-
SSDEEP
1536:hNDEdLvweyELylv+kw9gvCi9LeSJNaUxpNJL:hNDEdbvNylvVwgvCisENa4zL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource dbd488ba2532e57c3a72d57293a5ca41_JaffaCakes118 unpack001/out.upx
Files
-
dbd488ba2532e57c3a72d57293a5ca41_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ