Behavioral task
behavioral1
Sample
01b922efc3be91daa63144992a632321_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
01b922efc3be91daa63144992a632321_JaffaCakes118
-
Size
5.2MB
-
MD5
01b922efc3be91daa63144992a632321
-
SHA1
3e2b05d08c6825330172b81b615da822acfc5dd0
-
SHA256
b798b4388276a4cdd78d7d825b780537d055369e4d35f96839203a72a527482e
-
SHA512
95886aaefd174c7e5a0e8841d6ba28de745fc718fae429921281db2d45c0fa34c55c5ac0490c39f7ad02057f8332581d781bfeb5ff1de36e562fadcaf7a21f4f
-
SSDEEP
98304:CfyRABXY1XryDr/ONPAOIcQnq2UEv1PE4ZJ0hRFgkvQA5M29dAs8TSrskkC0Cd:ko9ryf/O1AOFQnq8h78hbLmNUACd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 01b922efc3be91daa63144992a632321_JaffaCakes118 unpack001/out.upx
Files
-
01b922efc3be91daa63144992a632321_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ