Behavioral task
behavioral1
Sample
f5df066574ccb0b537f39b5b80bf86dc_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f5df066574ccb0b537f39b5b80bf86dc_JaffaCakes118
-
Size
918KB
-
MD5
f5df066574ccb0b537f39b5b80bf86dc
-
SHA1
350088c2d454d85255bb37435bf3f1100222163b
-
SHA256
f9e94faf866ec190cc380b8388572c49ec207b6c90e8ea80478be6355704c0c4
-
SHA512
98ad5df71562ccaf3e7ad7bb76c3ba70d95f5ed6c4f7f046bf007f23f068bd5307796476646e7ca8ab3a3f99d59413c1728e7e66c56232f15a2e7fd4d55c9bd4
-
SSDEEP
12288:OUN3R5MpQdWUDPAACRRXDzmbwnHImCunlYRx1ZkLZE/dL15SyXD3ArfMfEiK1FpF:x3AQPo/ybwpwZky/VxArfMsioFL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f5df066574ccb0b537f39b5b80bf86dc_JaffaCakes118 unpack001/out.upx
Files
-
f5df066574ccb0b537f39b5b80bf86dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 909KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 234KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ