Behavioral task
behavioral1
Sample
137e75b13d62def9091c76ef9680f469_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
137e75b13d62def9091c76ef9680f469_JaffaCakes118
-
Size
139KB
-
MD5
137e75b13d62def9091c76ef9680f469
-
SHA1
0a9e89fd8f4cabc8c4e50db72fff5d07de0b6cf7
-
SHA256
f5e6d58bf402790232d95f118e2e5f6c613e84e114817e48f3e3d6ff8ecea5e0
-
SHA512
a9f42db54471eef8871dc6e8d43f443765c65ab261a16fdf93f88c486418725cf10005c19b5c4334aae6f8ff0c6b726467fab67486fc96351b9a4cc379662594
-
SSDEEP
3072:ysPXyRcw3JTxmyC/2v6ABkDySQkL9hAJOOQk2oRs1y4KJRTm88:TqcwFxmyC/2vRBk7hLfAJLQRlvK+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 137e75b13d62def9091c76ef9680f469_JaffaCakes118 unpack001/out.upx
Files
-
137e75b13d62def9091c76ef9680f469_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ