Behavioral task
behavioral1
Sample
0a4d782b12a4bbb1238e09f397468523_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0a4d782b12a4bbb1238e09f397468523_JaffaCakes118
-
Size
83KB
-
MD5
0a4d782b12a4bbb1238e09f397468523
-
SHA1
8d21f6f96acbd5c8cfb363ac7311c121dee10181
-
SHA256
aa2a543254db68fae2bb2dbb9ff4fb23eac8fd9f3d5c4ce5adf3e4406c78b03f
-
SHA512
12f8ed141a3fa5fb2a57b6b5cafb6e00ae3e0c5e5c9ec3ae5825d06ca8c8ffb2cc2f899a5af5f2af420b415c88afdbcc81d1614683569f892fc7d4644b51fda5
-
SSDEEP
1536:qs4TTl3nUmWDXwEcYs7hrrNeQ8F0Mkst4p+z9QquOft1ZJ3wny/dPd:q5TZ/oXBcT7JkjkstZ1uy/Zd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0a4d782b12a4bbb1238e09f397468523_JaffaCakes118 unpack001/out.upx
Files
-
0a4d782b12a4bbb1238e09f397468523_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 4KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ