Behavioral task
behavioral1
Sample
e017207828f95e2a6f0a27f0c5345263_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e017207828f95e2a6f0a27f0c5345263_JaffaCakes118
-
Size
8.8MB
-
MD5
e017207828f95e2a6f0a27f0c5345263
-
SHA1
a7c4a16591e7d2544706df76e61a9f9adb9f8eea
-
SHA256
107ce4d88c11e5409ba945cc6db6e139fd7df3960cdcf7abdf560fdf9b49d88c
-
SHA512
6b0f8ddaecd72d797c7af1ef8b4ff378d09bb5342a7a2873d279917f23d3949523fb947d87bf9ade43d9e100649399c28cd95f61d5917a6ca90b2d9c83484bf5
-
SSDEEP
196608:CheW8XkLDeyEiKTgQac+5/Xi7ka6Z1KDqYgZcKDVLgtDlHCqWMZT:CX87ytKgQaJ/UkXWRK5LgFlHC2ZT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource e017207828f95e2a6f0a27f0c5345263_JaffaCakes118 unpack001/out.upx
Files
-
e017207828f95e2a6f0a27f0c5345263_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 804KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 601KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 709KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 307KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ