Behavioral task
behavioral1
Sample
f51d940b7069a9384a8af2db0bb985e7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f51d940b7069a9384a8af2db0bb985e7_JaffaCakes118
-
Size
87KB
-
MD5
f51d940b7069a9384a8af2db0bb985e7
-
SHA1
92f5bff802f37dfde1125f30c98d627056e4f248
-
SHA256
485c45290513706583a7ce0549e69e4d29543a2192734cddec6ff173f24010ff
-
SHA512
3ec2698d6fae567a20f69b180947f154f3fe86f4e1080529cc5a32c8b3bee3866721598c58e7b28d49610bcea66495b8ec0335e5c79fc9a459a30dc5420f6543
-
SSDEEP
1536:xQ7tmDEOaIGn+Jo0ztewcHAezXun/5DmyV9n8Rvhy4gTaf+UhXJ2qqjTW/Uk7ydM:yJmwOsnYoGerAeLamyV9nUElaf+3jTWv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f51d940b7069a9384a8af2db0bb985e7_JaffaCakes118 unpack001/out.upx
Files
-
f51d940b7069a9384a8af2db0bb985e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 160KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ