Behavioral task
behavioral1
Sample
eabd47217e4cebd2850efae233cb32fd_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eabd47217e4cebd2850efae233cb32fd_JaffaCakes118
-
Size
32KB
-
MD5
eabd47217e4cebd2850efae233cb32fd
-
SHA1
d37a4afef4f56615a803e725fddfc187078c467c
-
SHA256
a8f004a8f8d7b697f18a605292c60a5f76de1ea9507b09237736ab9f2f0f01d6
-
SHA512
e1f74424d3ef4ef7372b0da9737680ca43477794ae42e58ed416f5737dde4e5ca9465314247d2b316b4f97b5a5dd69970120b7f017b972e8a8408f57642e65c8
-
SSDEEP
384:a6+XL9Yo1Me5XV0387hbQZtlooHSsaXrh7kxi9EZmWYHmARhWech9P18nnbIjxVD:6XhY8RX/ts9ooHnaXCPZfYvnWTCAwef
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource eabd47217e4cebd2850efae233cb32fd_JaffaCakes118 unpack001/out.upx
Files
-
eabd47217e4cebd2850efae233cb32fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ