Behavioral task
behavioral1
Sample
ecea1b9ef4553b388a822cd4634706ed_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ecea1b9ef4553b388a822cd4634706ed_JaffaCakes118
-
Size
33KB
-
MD5
ecea1b9ef4553b388a822cd4634706ed
-
SHA1
527fd2fa760a20a0ebf0beba2dd36f53b54f5ff6
-
SHA256
470b50bc328ed4fc1a1a0f71178eb731eb5c00efdeeffac5daef4e369f86537a
-
SHA512
85581d305609ee9c20f6fa3412b9d2dd90f453cc12403fb45482cc8829fe469102c69ec71778585e1257e6be4bf1e28f7e8890a70eac9fa455dc23a3490f8939
-
SSDEEP
384:96Tp0OfNRSZe+1i3o0UI/BUgInq+AQBOXzn3q+pWNAkSmyb2ss7vYhuwwP8R8ERv:9ax49s40bSBfIzpWN9abK7vahBzHc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ecea1b9ef4553b388a822cd4634706ed_JaffaCakes118 unpack001/out.upx
Files
-
ecea1b9ef4553b388a822cd4634706ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .wsf windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ