Behavioral task
behavioral1
Sample
1072b68f02baace46d5c513e6799dbbc_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1072b68f02baace46d5c513e6799dbbc_JaffaCakes118
-
Size
15KB
-
MD5
1072b68f02baace46d5c513e6799dbbc
-
SHA1
1c4a5843b3b870ca55ca129b065c98252c15bdd9
-
SHA256
be225e409042857a38e2c7af288cc554dcb3259cfd6a35482e7a7260c05fffb8
-
SHA512
cb14b048ff46b1dd670a7fd32712105e72a3d9af6d36065d427e90b8c32c406597b981fea743676b00f051b8145f6a67eacd16a037102eadd011aa4321ed3743
-
SSDEEP
192:AuqTFAi+oCur+oqQRcn/BC7zkOSeFMhxuGFAgGWNVzOas/a9hlGd7mfq89FzBk9:k8Pe+icn/ykOSewYx66wTeCfjFd2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 1072b68f02baace46d5c513e6799dbbc_JaffaCakes118 unpack001/out.upx
Files
-
1072b68f02baace46d5c513e6799dbbc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 950B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ