Behavioral task
behavioral1
Sample
ebffc7762f435930059dc9effce64f22_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ebffc7762f435930059dc9effce64f22_JaffaCakes118
-
Size
32KB
-
MD5
ebffc7762f435930059dc9effce64f22
-
SHA1
c72fad5eb9d9aeaf7b3feeb61729dd306b69c8e7
-
SHA256
397e5325c85184be8976df8323f78fc3a15831d2eb7be7c95dee61f601d9ae0c
-
SHA512
5afb803d996fd5752f6846b3b8a3c78e1d2bbda5e24775888542f41585dbf8d90cea4fd5b5030773512bf025d30326b2731b2818600f1f197ca1b78c779e61f0
-
SSDEEP
768:QQOoRz5lQHqEoasH2ftUt/cwCsfmtbTep7U+LpBJGR1CK:zdlxaOWsfmt2xJ9BJO1CK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/out.upx
Files
-
ebffc7762f435930059dc9effce64f22_JaffaCakes118.exe windows:4 windows x86 arch:x86
Code Sign
96:fb:a5:ff:fa:2f:d1:97:82:2d:3d:24:55:a6:c6:9c:f1:d0:09:bdSigner
Actual PE Digest96:fb:a5:ff:fa:2f:d1:97:82:2d:3d:24:55:a6:c6:9c:f1:d0:09:bdDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE