Behavioral task
behavioral1
Sample
0c94a290fbcb360f6c5117800714aaae_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
0c94a290fbcb360f6c5117800714aaae_JaffaCakes118
-
Size
130KB
-
MD5
0c94a290fbcb360f6c5117800714aaae
-
SHA1
ce65b4b3567a39ce9145bdd7beded5901ee4d7de
-
SHA256
0db67b756d59af69b78145fdd113ca47098a3c78d3d814f8fd8ffc2f5af284cf
-
SHA512
29ddd33655b437d7f4278d9f8f1d850bffdc2f901791009e4a46543a7f54b9ac96befbc109ef6e68e138b9d59a2bfa8c84180bba6a804ba577c4354f18aa1dad
-
SSDEEP
3072:4zs4W3I/cCy6I2F2EkVqSrDCzBr3TXXRFEdlCBJ:4zU40f6I42Ek8KezBTXX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0c94a290fbcb360f6c5117800714aaae_JaffaCakes118 unpack001/out.upx
Files
-
0c94a290fbcb360f6c5117800714aaae_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 383B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 221KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ