Behavioral task
behavioral1
Sample
f024d6dab1f9dd0cad66fabd1fef825d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f024d6dab1f9dd0cad66fabd1fef825d_JaffaCakes118
-
Size
19KB
-
MD5
f024d6dab1f9dd0cad66fabd1fef825d
-
SHA1
a85b8fa719cbc41b51b3f8a7996606b17b849861
-
SHA256
ca1fd4b69aa575a1fda3ef58ad00886b14a86ed66ede1f385564a991b579a8ea
-
SHA512
ae97bb30d123ad4b746144ee0ac9815d1386fe14cbc26a9c7664f4e4ee03b2dbdba4446596a12a1073205aa7f861baf0cb214f59c8549b6cc041835f40bb2d10
-
SSDEEP
384:aiiSQNt2JsaeA0s459ea20p91M9eUvvdq/4zK4aDaxfWc4vHPvt:aiiSQNtms1Asucp91uecdqQHaDaxx4PP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f024d6dab1f9dd0cad66fabd1fef825d_JaffaCakes118 unpack001/out.upx
Files
-
f024d6dab1f9dd0cad66fabd1fef825d_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.norton Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ