Behavioral task
behavioral1
Sample
0158e1ccf59ab35ff7061d28a9c828d2_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0158e1ccf59ab35ff7061d28a9c828d2_JaffaCakes118
-
Size
252KB
-
MD5
0158e1ccf59ab35ff7061d28a9c828d2
-
SHA1
d1cd180769e7b4e4075a3a934d1790117a67caf7
-
SHA256
fac549c54496c26f0d21fd2a3b17d3e62ebf4c92a0c8ef50a804360da0bf7d9d
-
SHA512
13d684e000375c466311673d6f66ebcf92d6e20b7224c598dc097f135672c1cf184d8bccf072503d4c1842591a25a31b27291c1cb3bd042b7741f2af455fda35
-
SSDEEP
6144:kEGPUGK4HE+VwqfZXQUAqSrr6nqUeJ0aaZ:KMGZZR2r6PDaU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0158e1ccf59ab35ff7061d28a9c828d2_JaffaCakes118 unpack001/out.upx
Files
-
0158e1ccf59ab35ff7061d28a9c828d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 652KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 783KB - Virtual size: 782KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ