Behavioral task
behavioral1
Sample
1256dac0e3c858a9c681a2ebc68f3b80_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1256dac0e3c858a9c681a2ebc68f3b80_JaffaCakes118
-
Size
129KB
-
MD5
1256dac0e3c858a9c681a2ebc68f3b80
-
SHA1
7554a9b1abe83fbd5d0b95602e4980a03ecbbfda
-
SHA256
c597176d87d7d54f1834a3fd1fffea97133454f28da8587b47c4a748966f8814
-
SHA512
1b6e2c46019f3a7db6c57dcccaf3660492d6e164d1f10aae817284d59941c208c71a54410a6df9d2c7f24780548e82dcf329558a850ffaee7f1812cb87b82abc
-
SSDEEP
3072:IHNiOCNgOq3w8J+iuMbbOaXfv0k9nb3jSuHCOS2MIz5vX:ItINg+9iuMPJJ3jSCCOSBIN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 1256dac0e3c858a9c681a2ebc68f3b80_JaffaCakes118 unpack001/out.upx
Files
-
1256dac0e3c858a9c681a2ebc68f3b80_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ