Behavioral task
behavioral1
Sample
f65ef5a2da421d7924da806d71d9cc93_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f65ef5a2da421d7924da806d71d9cc93_JaffaCakes118
-
Size
137KB
-
MD5
f65ef5a2da421d7924da806d71d9cc93
-
SHA1
8de6db327c39d01c8e801110b66de7755e36e7b2
-
SHA256
a080b85344c2773339c488854089681a41f034c85f7648976d4c26f1d2b9c4b9
-
SHA512
3c002b0aa2a29e6cfb19a6f2f7b8e4e28e88dfcb00e14801513a4fd14e8e09e8d4abd3a9ab88f40474354e799d92dfd694a6029a3c45466aebcfbf5071884bd2
-
SSDEEP
3072:D3G9yf88IfPjyc7z/HzmGlrd1DJgj6ihWkhVrqg1UPRL:D3Nf88I3jyc7Ddlrd1DJw1Ecqg1UP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f65ef5a2da421d7924da806d71d9cc93_JaffaCakes118 unpack001/out.upx
Files
-
f65ef5a2da421d7924da806d71d9cc93_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 128KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ