Behavioral task
behavioral1
Sample
e02f9084a55cf8a05154083bae623609_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e02f9084a55cf8a05154083bae623609_JaffaCakes118
-
Size
84KB
-
MD5
e02f9084a55cf8a05154083bae623609
-
SHA1
8551dab8de01f000a7419ea61fd12555b58b7c68
-
SHA256
d1ee3f655bbd9bb45e61ee96ccf5754d88cc27d8dcfde0fe1f1194ef7289ad1a
-
SHA512
17df02cfaa8fd912d0282aa8525d1a4094fe209e582f6c592517c8398710e347c1976cfdf12d718d4582547f4e0a913f81b9840f9fddf899aa1b177d34b99d9a
-
SSDEEP
1536:HuFvaFOT2q9v/+QJzyDJxdhjUv0yGkAZyhx02lZNq3lI7m:WaU6q93+HDQvJGByvlZNsIi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource e02f9084a55cf8a05154083bae623609_JaffaCakes118 unpack001/out.upx
Files
-
e02f9084a55cf8a05154083bae623609_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE