Behavioral task
behavioral1
Sample
fbeaaed674d4dd83eb895b604061b0c6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fbeaaed674d4dd83eb895b604061b0c6_JaffaCakes118
-
Size
87KB
-
MD5
fbeaaed674d4dd83eb895b604061b0c6
-
SHA1
ece64bb8b7187aac838ba135e8f223f5c79adb89
-
SHA256
3ee49fb4cfd4b08adfd17d8893d56a7f949957bea49878f4b7f0973b9789004c
-
SHA512
d17492f58fcd69bff4ec77c3d924a6b506389b5568243e3446070717b17eb59ac0fd3efb4a19a43a5e4d4084cfb5eb2e56bb8d2887754b84f91e3eef5cd8a023
-
SSDEEP
1536:UFgTXheV+7kJJkbkHaIYoVE2lWyVoYg2anFQC3exPBAocG4Wu:UFg7PrbjiEug2mKC34Pmoyp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource fbeaaed674d4dd83eb895b604061b0c6_JaffaCakes118 unpack001/out.upx
Files
-
fbeaaed674d4dd83eb895b604061b0c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 94KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 482B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ