Behavioral task
behavioral1
Sample
007c679fd2a850836b9b8dd213ddca55_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
007c679fd2a850836b9b8dd213ddca55_JaffaCakes118
-
Size
81KB
-
MD5
007c679fd2a850836b9b8dd213ddca55
-
SHA1
01d0180d4cd20f306d93009e46fc42fe9549e8df
-
SHA256
6b36a079387fd79b7f6b842d516e681a89b3ca684839711c8b902e33631a9a07
-
SHA512
f001753565f1af886d5c05a50025bc8d32a875a1d45f7291f41943148f42548665f3c19af2a3c7744d9fcd745a8cab37b4b850ab0d986211ac34a755f7b23f3f
-
SSDEEP
1536:BnO6kGMNkiwp2NAgTymr7qLXKeWCvyG2513B4ABdIA/zdrD2CGlbfpKeyOso3YXu:BO6HbiZNlTymrWLvJ251SiRX2fplFWu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 007c679fd2a850836b9b8dd213ddca55_JaffaCakes118 unpack001/out.upx
Files
-
007c679fd2a850836b9b8dd213ddca55_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ