Behavioral task
behavioral1
Sample
0aa3650e3679c5ca12cccfbeac6c1fda_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
0aa3650e3679c5ca12cccfbeac6c1fda_JaffaCakes118
-
Size
26KB
-
MD5
0aa3650e3679c5ca12cccfbeac6c1fda
-
SHA1
6b6fdadd5e27c9636119961d95c1c29725baf3a4
-
SHA256
dbfe93569e2253d395146daf390e74d4973049a8753f952355710c437859482f
-
SHA512
f1bea0a3bcacd8cad99b4d43cc24986e8c484ae938cedb17a28dc114c265b8c83253fa3df3288c0077eceff67561f14f17667bd72f35431c5994717c20d7c495
-
SSDEEP
768:TmciO2VK9cRkXpTwNLjMBUHWxKr/yFa8f9X3:6n+X+NP65aUp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0aa3650e3679c5ca12cccfbeac6c1fda_JaffaCakes118 unpack001/out.upx
Files
-
0aa3650e3679c5ca12cccfbeac6c1fda_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ