Behavioral task
behavioral1
Sample
f65f80a43989f6fd80d1324ca49160d6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f65f80a43989f6fd80d1324ca49160d6_JaffaCakes118
-
Size
32KB
-
MD5
f65f80a43989f6fd80d1324ca49160d6
-
SHA1
a633faa79966a8b7049c6d399205d2db04aa3932
-
SHA256
68db803b90eba53d7e4085f6ea3fe7cc684f24e5b4c009079e91a26892f406bc
-
SHA512
63d77db6f4ced7bc49e3c00eb846806f3df930a1a180c928d8c9b631c052dabf4ae1911a3a20e0e7cb61d9ced17517e805970b930019d9da874a28353a917b7a
-
SSDEEP
768:DBVfnkQCjWPArfvbBXE5H16QfrHJx3SW9WVa4:NuQC+iNXE5H8QmW9Wh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f65f80a43989f6fd80d1324ca49160d6_JaffaCakes118 unpack001/out.upx
Files
-
f65f80a43989f6fd80d1324ca49160d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1010B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ