Behavioral task
behavioral1
Sample
fe51ba9d0f36c064e4e219cee11494ae_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
fe51ba9d0f36c064e4e219cee11494ae_JaffaCakes118
-
Size
52KB
-
MD5
fe51ba9d0f36c064e4e219cee11494ae
-
SHA1
88025a4d6bfa5a163382ee93198e5851b68cd73f
-
SHA256
a15df4181bee6ca0e59fa5954aecc277d8ee50c22c1763f44e4a297d95acc334
-
SHA512
18f3e686a7a261d923a52b5ea92a9cd3ca7dac69757b0ab03d27470e027f2def0a705f73aa90d130cfb3ad0c34129c6bba841f6f709d1220688b2453092caa2d
-
SSDEEP
1536:s+Bvcn269ZU0XgsH5ZKbu5n9Xx/4WqwBmV/8:s+Bv619ZU0Q0jF9Xx/4W5BG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource fe51ba9d0f36c064e4e219cee11494ae_JaffaCakes118 unpack001/out.upx
Files
-
fe51ba9d0f36c064e4e219cee11494ae_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ