Behavioral task
behavioral1
Sample
dbe832ab7e7031e466ac82d54f1f454f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
dbe832ab7e7031e466ac82d54f1f454f_JaffaCakes118
-
Size
2.4MB
-
MD5
dbe832ab7e7031e466ac82d54f1f454f
-
SHA1
dc5a5ac246bb57cd2ae898942aecf9adef5548c6
-
SHA256
da7bd0543d245a3ad3bce239ae2551587667db3e934f369777b524152435d94e
-
SHA512
fb306ccf9fa674e4b0f538ce06703d2b93a66deb62edde2e81593341580cfbec78c74205976dbf921e1fe62f4fc9b02cd1eeef87d5ddca4e2aa2ea7a023c39cb
-
SSDEEP
49152:DBvinkkQKRNvKR5pdwwa9AwRDZcaS+GoFvrFT3JL3nAEL7kG3Y:DQkeRNCddwfNnrFhTt3zL7kGo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource dbe832ab7e7031e466ac82d54f1f454f_JaffaCakes118 unpack001/out.upx
Files
-
dbe832ab7e7031e466ac82d54f1f454f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 645KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 952KB - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ