Behavioral task
behavioral1
Sample
1148badc94777309ebefb1ac7b4b34bd_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
1148badc94777309ebefb1ac7b4b34bd_JaffaCakes118
-
Size
37KB
-
MD5
1148badc94777309ebefb1ac7b4b34bd
-
SHA1
f3dda4e963b565c30678dee5e715dddca6d6b834
-
SHA256
7965414b616eb8e300bb6177703299722c6fc451b67cb3514600f7b486e71482
-
SHA512
cbc48dc447754e2ea4a71d1bba16c5cd64b3704663ef69935ba767a907ce5916520f66791f19684b7f57483b0b4aea7f9a896a7ca3f653637c57dd8a24c27ca0
-
SSDEEP
768:p/xZYHIYqC6Y7e4TwIW6HK9BCeFGDY/M9A5+cxo:XZuPN7xe6HK9YmGDYE96+cxo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 1148badc94777309ebefb1ac7b4b34bd_JaffaCakes118 unpack001/out.upx
Files
-
1148badc94777309ebefb1ac7b4b34bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ