Behavioral task
behavioral1
Sample
066c351f3a9032daaeffbe8375ced83a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
066c351f3a9032daaeffbe8375ced83a_JaffaCakes118
-
Size
41KB
-
MD5
066c351f3a9032daaeffbe8375ced83a
-
SHA1
a927e15b007293b2d263df3b837b7393da1bf2b7
-
SHA256
e34cb044d82a3c75ce46b4315dbb63822a9d754b177ca60adb95a0d8c84fb5d9
-
SHA512
11305789ff27f826e118203c09f2befa693b83ac8dfcbf660e023e399b018dd43229fe7cbaf1e7b558cec69c04d27ff423a24ba1f9463e27f2438d0f581b6aed
-
SSDEEP
768:o+TqYauGTl51v/KaVfKL3yAJvg4NHEXsU/4AoPgir:pq5jTl51FSL3yaYQMzMIir
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 066c351f3a9032daaeffbe8375ced83a_JaffaCakes118 unpack001/out.upx
Files
-
066c351f3a9032daaeffbe8375ced83a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 886B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ