Behavioral task
behavioral1
Sample
eb0a5dc8556055bb4c4bb4b6097bfbb5_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eb0a5dc8556055bb4c4bb4b6097bfbb5_JaffaCakes118
-
Size
349KB
-
MD5
eb0a5dc8556055bb4c4bb4b6097bfbb5
-
SHA1
83a6dd27c628a2a179d0dfba799889f24e4e004f
-
SHA256
b2bbe9272f255ae919df2a5f1c78d9013e13845ff48a1c7725eaeff35cac1a4c
-
SHA512
ae8bc4256e27a1afd250d3735f8915d5df31c06946a43b7b5ab02aa7c2efd98cfebb04b4243d74fe1560e6364a56ef748a590440abac0f47fa36e422b184fe7e
-
SSDEEP
6144:8Ri4aNJ6Nw3ZQrW7J+HDE1/kSR8YpzbMa+8wYlCEHhfva2cfk1qMELiPDlyZ53y:8Ri9NJiwGit+HDE1l8YpkPYlYk1k2kZc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource eb0a5dc8556055bb4c4bb4b6097bfbb5_JaffaCakes118 unpack001/out.upx
Files
-
eb0a5dc8556055bb4c4bb4b6097bfbb5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 346KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 590KB - Virtual size: 590KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ