Behavioral task
behavioral1
Sample
f0ccd0dba65f0ce01277ee39e747ee26_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
f0ccd0dba65f0ce01277ee39e747ee26_JaffaCakes118
-
Size
697KB
-
MD5
f0ccd0dba65f0ce01277ee39e747ee26
-
SHA1
d3d002b4951c1a94c0c136ef007b1dc0421aef24
-
SHA256
6222a8e19f16e5886de57a99033db4cc62b07fcab6fefed203fd3c647a87bc9b
-
SHA512
39f45003aad072549f6fe3c5bf6a1123dc96cf471f25c3e5d3d3282a59e42a39bd57231e41fae027fbe523f75e760a841b0f722afd2168ab355c8d7c657a6012
-
SSDEEP
12288:3SDVtKHccoJOuYGD2lVQuq83gdeCCs9b4e29kBYwnnmx928orl6dTM3EINLKmIJA:3rIfTaEuqQs29kBYcnmz28UooUIgLS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f0ccd0dba65f0ce01277ee39e747ee26_JaffaCakes118 unpack001/out.upx
Files
-
f0ccd0dba65f0ce01277ee39e747ee26_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 768KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 694KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 592KB - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 270KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 160KB - Virtual size: 571KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 440B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ