Behavioral task
behavioral1
Sample
09abdacba85c2623efb30d9b23103731_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
09abdacba85c2623efb30d9b23103731_JaffaCakes118
-
Size
840KB
-
MD5
09abdacba85c2623efb30d9b23103731
-
SHA1
b68b55d8d4a450763453ec528b499155a8c7fce3
-
SHA256
b3316bb045031c6e49ca99197a666fee987aa8018e567f4de13204f43fcc037b
-
SHA512
306d257d908ae0a21d352ca0130b87d4b23d84bbc196529478dc39dec2d2dfed07a550729627e79a87f4acae36ad7746baa68b7d1bcb9aba4dba1c2104a2537b
-
SSDEEP
24576:P7v928ytBrgRRQ4+isVx5LPBweCI3QgSCsS:P7RPR24Fax51weCIm4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 09abdacba85c2623efb30d9b23103731_JaffaCakes118 unpack001/out.upx
Files
-
09abdacba85c2623efb30d9b23103731_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ