Behavioral task
behavioral1
Sample
def02f5ec34f22ce147b592ce958cf7f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
def02f5ec34f22ce147b592ce958cf7f_JaffaCakes118
-
Size
361KB
-
MD5
def02f5ec34f22ce147b592ce958cf7f
-
SHA1
ad6811384fb35ba13f9d132caf76941575291c43
-
SHA256
f2a0806e52cf0c88217b07648b75068176a9b799ca65c32ae70cf41f6c1a4f62
-
SHA512
a17cab8893dc82a700c51b75c99820d1f35ac4552adc2f7c4ec3d8f16a2f59ed53dbaf6241bf9d0ed3062a501e1caaf72fb0aef93276cffa1456b65cb8582230
-
SSDEEP
6144:Kb0zVfVrhDl4HEpNbZzq1qrSDlqZjrzToqwTb8j5Qp/rwYLwr5c4Fdjtkc1yyQgk:xVfV9Dl3zq1qGiXG8Fq/sYLwr5c4XCce
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource def02f5ec34f22ce147b592ce958cf7f_JaffaCakes118 unpack001/out.upx
Files
-
def02f5ec34f22ce147b592ce958cf7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 357KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 148KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 300KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ