Behavioral task
behavioral1
Sample
10fc23b889c0014a58af24f0c095e83c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
10fc23b889c0014a58af24f0c095e83c_JaffaCakes118
-
Size
93KB
-
MD5
10fc23b889c0014a58af24f0c095e83c
-
SHA1
ac99ef146e6ee3bd303ed3b6cfec68a82ab8e683
-
SHA256
bff7580dec012413d2a56bc9e5f45314e7b8e0e1249c0ba18602dd3d1c98be96
-
SHA512
1d961e476d4e87674b434214cd64bf278c98a60fa0a39bd27c7a325a731db15376900825895da6dbaf160bd150b240820bc3906b9444fb2f3fe122cc636505f3
-
SSDEEP
1536:7drNF9Hfs7GrDAytdWvjavg75PgpbFKk9/UxYl89iyP96pe:75P9HfOGIoWvjyQSJ79/8YyiyV6p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 10fc23b889c0014a58af24f0c095e83c_JaffaCakes118 unpack001/out.upx
Files
-
10fc23b889c0014a58af24f0c095e83c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ