Behavioral task
behavioral1
Sample
eedbb9423270c55264bbf57fab2154d8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eedbb9423270c55264bbf57fab2154d8_JaffaCakes118
-
Size
126KB
-
MD5
eedbb9423270c55264bbf57fab2154d8
-
SHA1
d577b1081ba76d125b8f0af3962cef823101e25c
-
SHA256
8f421ca03db7bb70080d3c37e55e04bdfce2df9285c17b49c1b02e455f1d681d
-
SHA512
e0110b23e72efcf426794f2350d113933a0b3910e1db2c13b5c677d5d74f4c200cbec80719d65dc99f7e05ec57eadfcb68cb0a2860543d71ba00ce4931476cbc
-
SSDEEP
3072:ItyvRSlAw0duoGbGto1xlS7Qtmu5lr1zvSbOzVqmq:I+Fwguo/tojH3r1zv+ORqm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource eedbb9423270c55264bbf57fab2154d8_JaffaCakes118 unpack001/out.upx
Files
-
eedbb9423270c55264bbf57fab2154d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 482B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ