Behavioral task
behavioral1
Sample
fed97e39bb473494fc6cf11634ba6768_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fed97e39bb473494fc6cf11634ba6768_JaffaCakes118
-
Size
150KB
-
MD5
fed97e39bb473494fc6cf11634ba6768
-
SHA1
1e3f1edbc734741c648deb29eb78dedcbec5c33f
-
SHA256
2f1d5d968654f5d4e885a14246e4ef2bea3cd87d6699903c99c6e456e20526ac
-
SHA512
99e7ea4a4e72377543a68a4d2f8bac81f2c6716b29701ef433f1da816536e14fdeb32ddbdae3c5e017c72c14188d6835eede89aaa49e5d881934da970653af7a
-
SSDEEP
3072:kSysK3grbm+SLszC/XTrNAkqIeV+ntFFjIf7iTLxSY:LHrS+SLljmkqH4tFZdxSY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource fed97e39bb473494fc6cf11634ba6768_JaffaCakes118 unpack001/out.upx
Files
-
fed97e39bb473494fc6cf11634ba6768_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ