Behavioral task
behavioral1
Sample
114fad0e6a24961c8f156ddcbdc810d5_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
114fad0e6a24961c8f156ddcbdc810d5_JaffaCakes118
-
Size
113KB
-
MD5
114fad0e6a24961c8f156ddcbdc810d5
-
SHA1
fbf62a00914ae57e8a50049f07010cb6b58a3e07
-
SHA256
bb180ba88f6848cfd01f8e1db8fe2448482404d15712a1f334c90c0dc4c2a033
-
SHA512
87681c831cb6e0e99b67f92e50e2b58d39606241893681c5dfd64e46fa552b00180503feb50bf0782b0936f4d7fc4dab725fab5dbbd1849d0ef6e3b138c21e24
-
SSDEEP
3072:HT//gAMiJdj+yR/yq+cZImZlGbr68w696vf:z//gj2djlR/yqhZ5lYwP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 114fad0e6a24961c8f156ddcbdc810d5_JaffaCakes118 unpack001/out.upx
Files
-
114fad0e6a24961c8f156ddcbdc810d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ