Behavioral task
behavioral1
Sample
03f3ede0a9557ea662fae5556d8ee8c5_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
03f3ede0a9557ea662fae5556d8ee8c5_JaffaCakes118
-
Size
122KB
-
MD5
03f3ede0a9557ea662fae5556d8ee8c5
-
SHA1
2acb5002ccf17fc97d69f7edd8e940ac495bc8eb
-
SHA256
e11755a22aa1a9a2f1f75ae7edb02deb751dfeeaf1e8006a1b3bd21d64728daa
-
SHA512
5666f3cc47ca44dad5307127af97a193f2ace3b203369cc9769a5ac2d845931c5a46e975c577c20b50a1f84822a548d112a423784716764d21c0d289e38c2753
-
SSDEEP
3072:HVc6Wnn7hE8lZMcp7cMm9Wv/jcadZOoGX5H:HVIF3McdcMm9GBdkLX5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 03f3ede0a9557ea662fae5556d8ee8c5_JaffaCakes118 unpack001/out.upx
Files
-
03f3ede0a9557ea662fae5556d8ee8c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ