Behavioral task
behavioral1
Sample
13e5887e54e80629bb4fce62eed05d4f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
13e5887e54e80629bb4fce62eed05d4f_JaffaCakes118
-
Size
16KB
-
MD5
13e5887e54e80629bb4fce62eed05d4f
-
SHA1
40aed584fb351a188db593699e9d133875d8fcc2
-
SHA256
0dbbb02ccd1e1df5dd58fdfae9af2986027c09605f1d097e7ea1516b8297dc5f
-
SHA512
d42bb968336c7d9c61298ac689edeb28e0d2c5e3143007a4258a51324df99277a4b721bde11b8a9559808275156eeff3f4df732967cde7bff0f9dba1850f2cb7
-
SSDEEP
384:tkuZ4WeuB+xA46pCEEYfOXnZVHJRcFCyp1Pw3+B4A:xJBabTnXvHfMp1PDB1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 13e5887e54e80629bb4fce62eed05d4f_JaffaCakes118 unpack001/out.upx
Files
-
13e5887e54e80629bb4fce62eed05d4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE