Behavioral task
behavioral1
Sample
f084b1736c6de4aa7a35f1261cb89d5c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f084b1736c6de4aa7a35f1261cb89d5c_JaffaCakes118
-
Size
775KB
-
MD5
f084b1736c6de4aa7a35f1261cb89d5c
-
SHA1
e5a2014076a98f633b8510168e64189229d421b2
-
SHA256
1c9bba7c83fa5d7e0508c7a605380f6c6b62a8c95fe0cbaa4cffe952c521c972
-
SHA512
12a57f45761a01e4429d0a43bd2b616ce407a8c5aa7035403b25f1f6999272de1de8cca3986003e5c9657f34eb844d9a4ed58bd0acb66eeda6dbfeffe50fc227
-
SSDEEP
12288:D1wOirnOsJgq3XBBXpdpzEamWNJfkC+J58wIsKeFWvk8kf0cT9ziaQAnUS4xRxSe:pw7bBa2B3jfJf0u5PfQ0bvDSe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f084b1736c6de4aa7a35f1261cb89d5c_JaffaCakes118 unpack001/out.upx
Files
-
f084b1736c6de4aa7a35f1261cb89d5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ