Behavioral task
behavioral1
Sample
0e341a5f0445c65c40e5eff0ded0a9ac_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0e341a5f0445c65c40e5eff0ded0a9ac_JaffaCakes118
-
Size
396KB
-
MD5
0e341a5f0445c65c40e5eff0ded0a9ac
-
SHA1
a18c4aa14ff85e83f5a2e3303f4d2ac7b4f52ce7
-
SHA256
655adb7dc715463fc8f7db0cba1070c97897a7e95871f3368edeec9a7409a582
-
SHA512
a1445ac9341aa664ba520e93272d41167949c9440944d328e506c7aae6b7eb760fa92fadb91c5514792a60b7f037e991e8bc1ee21318d1eabd836cff73b12346
-
SSDEEP
12288:+iafEMR8XzhBsiu7NsT503YbWoxWmf5JcJ2:+RR8DhGD33uWmfLcJ2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0e341a5f0445c65c40e5eff0ded0a9ac_JaffaCakes118 unpack001/out.upx
Files
-
0e341a5f0445c65c40e5eff0ded0a9ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 377KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 576KB - Virtual size: 574KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 332KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ