Behavioral task
behavioral1
Sample
e01bf9d9ccf3a35579e2378a6427b389_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
e01bf9d9ccf3a35579e2378a6427b389_JaffaCakes118
-
Size
110KB
-
MD5
e01bf9d9ccf3a35579e2378a6427b389
-
SHA1
2072f99ec7b4e56da1981a234e9471d31d40488e
-
SHA256
af641793a0fbafd7dc8d72545c98e23f1ef2c49801aeee2f2771b0293233b040
-
SHA512
a7cdd625d1985a786d8638fffee5c6f5ffb8e3a2543d51e5b1627ad226385b70e9fd6dc24dcbdf824377dacffd35e90ba1e9fb12f9463aab1c270a6cbaf7387f
-
SSDEEP
1536:/zWJHL3OIB4bogUiCsKnjUiCw2fNcXYaWHIa+MCQY:WK04uDnZv0NcXWI0Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource e01bf9d9ccf3a35579e2378a6427b389_JaffaCakes118 unpack001/out.upx
Files
-
e01bf9d9ccf3a35579e2378a6427b389_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ