Behavioral task
behavioral1
Sample
fa0f6c877685308cef45791e6ef5ffb9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fa0f6c877685308cef45791e6ef5ffb9_JaffaCakes118
-
Size
151KB
-
MD5
fa0f6c877685308cef45791e6ef5ffb9
-
SHA1
1122faa04ff3e84abffd3c3d2cbfa5d61807e6c2
-
SHA256
a3d4ad850d8927dc47acf2f903f23c7c1aebd0a0be52c08a74a5d555837a34ae
-
SHA512
db207ce0113db763eb068fd6b5ea6859af15b9c55e9b1978602a95974793d2128d8dabeaea91863d097a007e813c489049eb1b73e8bfb9ac93719a4179d98e81
-
SSDEEP
3072:Kj7DASHW/2VqIwi4DSu1VSDTWEsVfm5IMJgMborPteTVLSQH4jX2:K3D1W/FUeSdxso5IdMborPtcH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource fa0f6c877685308cef45791e6ef5ffb9_JaffaCakes118 unpack001/out.upx
Files
-
fa0f6c877685308cef45791e6ef5ffb9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 268KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ