Behavioral task
behavioral1
Sample
103ce03a18e1eb85fcb2e6910d4defec_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
103ce03a18e1eb85fcb2e6910d4defec_JaffaCakes118
-
Size
124KB
-
MD5
103ce03a18e1eb85fcb2e6910d4defec
-
SHA1
7fd0212825ab9d53f3daedc286713b1ad3f14e8b
-
SHA256
888597ca43cea83da09b6f26f28395d6b9d5de0fded5ea647c1853fbaea4c927
-
SHA512
23768eaf31fb4e18e71ffd18f893c678e8764e9a16273de36006d6882ab745f4464b58160414d3df1fb8af565c92401de759dba65247ba2ab9bf6f0512a36b9b
-
SSDEEP
3072:ej7DASHW/2VqIwi4DSu1VSDTWEsVfm5IMJgMborPteTVLS:e3D1W/FUeSdxso5IdMborPt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 103ce03a18e1eb85fcb2e6910d4defec_JaffaCakes118 unpack001/out.upx
Files
-
103ce03a18e1eb85fcb2e6910d4defec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 268KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ