Behavioral task
behavioral1
Sample
eba0268af6b2db223efe4a91e4a150cf_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eba0268af6b2db223efe4a91e4a150cf_JaffaCakes118
-
Size
116KB
-
MD5
eba0268af6b2db223efe4a91e4a150cf
-
SHA1
0ad1474892c4bfee4a9e05d9dcca0bc9db851924
-
SHA256
d6a880cb56f54b8a2d1172fa34c9731c8afa738bc2299899d7eb17166939accd
-
SHA512
197beceefd35ae52009656b2c010fee6fb41c8d00b36d186273b67d12382c1964f0e46bfa3e43be880c166296147729688c32a55133377bfd923c55a0e0c9bc0
-
SSDEEP
3072:3Nl5zhD+xJqpraouCgEFMFv5VA2fvTMVWRlZMV:f5d+2FhgE6FI2f+Ii
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource eba0268af6b2db223efe4a91e4a150cf_JaffaCakes118 unpack001/out.upx
Files
-
eba0268af6b2db223efe4a91e4a150cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 96KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ