Behavioral task
behavioral1
Sample
f51b5c3e4ee0cb0381a0e0e57401a8e7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f51b5c3e4ee0cb0381a0e0e57401a8e7_JaffaCakes118
-
Size
113KB
-
MD5
f51b5c3e4ee0cb0381a0e0e57401a8e7
-
SHA1
7cd4d28f7a0e279237cf4809126c8fd3dbc0393e
-
SHA256
14ab2894bdbe144112dfcdd47e062a985a531da50ca3cc4e9f0ff1a79c07206a
-
SHA512
454ab66a8c68761c8cca7ed2379bb49315ff9d97cab5985806e906f194b304e6e1b853c5f32cd374a7fe9960af5c1a5942b38f29d2ce89c379edb7db928b5e50
-
SSDEEP
1536:6YNQ+cdiUBjyWgp0oNmFqXmO9RDOib6aqkSZZZ3EIlGGuDEXMiwthVdeCSZ2JqNm:6yUBjy5OFvO9RDbbNUEIlwR3VYZPby
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f51b5c3e4ee0cb0381a0e0e57401a8e7_JaffaCakes118 unpack001/out.upx
Files
-
f51b5c3e4ee0cb0381a0e0e57401a8e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ