Behavioral task
behavioral1
Sample
1097a3945a9aa4cd0f2840f7ddc4ceaa_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1097a3945a9aa4cd0f2840f7ddc4ceaa_JaffaCakes118
-
Size
2.8MB
-
MD5
1097a3945a9aa4cd0f2840f7ddc4ceaa
-
SHA1
97ee5c18f4f3ca3b77db1a2f3da4578f2a67b0c0
-
SHA256
be820776659904797d7b07574f66202a39e2f842608d8beba65c8eb9d995fca1
-
SHA512
e3f510c202dec9b04c8e8c6637110d503ae3275d9a24758fa43de763d6d61061877cf4b054d8e6607e4071ebc39e250c7f75bf26fc02ed15edf1dcc36a87c9b1
-
SSDEEP
49152:07HuwmJh/D8QffJTLytYs57WWXilhnrE3ETVG32CaIHItgs85:aOJhLrTLaY3o3SOaIHItgs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 1097a3945a9aa4cd0f2840f7ddc4ceaa_JaffaCakes118 unpack001/out.upx
Files
-
1097a3945a9aa4cd0f2840f7ddc4ceaa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ