Behavioral task
behavioral1
Sample
023d95bc518389b769257dd0a6e3bbb8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
023d95bc518389b769257dd0a6e3bbb8_JaffaCakes118
-
Size
43KB
-
MD5
023d95bc518389b769257dd0a6e3bbb8
-
SHA1
c3d6fedf4acce31a95f294de1d31b00a3e6bdfc8
-
SHA256
e1ce76c076b327969ede820b0f4b311bf2ecc61adb9425b86f991c3b8a80d278
-
SHA512
8b949ca2f1d72347f3b39a6b971eb9a1c9ea8bbc6b9fce01c52b93c5c05e37f2121b7ed6a5fd8c54d0ed786e3ec6f26aabaa0bc32442bce4ae585aa3bb10dc45
-
SSDEEP
768:AEryZTVwlbUq4JdK52OEHZ5uLXlmm/8MEMAbuL3kPXlzmUF9tQ1O/9J6sSlM:AErwxwGE0fAl6MAbugvl6UF9tQ12T6tl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 023d95bc518389b769257dd0a6e3bbb8_JaffaCakes118 unpack001/out.upx
Files
-
023d95bc518389b769257dd0a6e3bbb8_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ