Behavioral task
behavioral1
Sample
176f7acdc21f41906a857ecb4bcfbcc5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
176f7acdc21f41906a857ecb4bcfbcc5_JaffaCakes118
-
Size
257KB
-
MD5
176f7acdc21f41906a857ecb4bcfbcc5
-
SHA1
4a886370debbcb880091fe7aba1d4031a29d9347
-
SHA256
814ffe1c3b5496f050cc830714d52be98894771aa4b3639ddf061cf81abe4155
-
SHA512
256340ea6877ba9e32e9b2b11457d9de2e0b5e9198cfc486f3c7e485bdabcd1203e4ec99a9f3d8780fb7739d28eea323c096234e535ed27a3398cfad577d2f5d
-
SSDEEP
6144:6MzzILGFkzhr0pGj9otMXpYpr/G2EMGK33:ocoqGj9otUpIre2KKH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 176f7acdc21f41906a857ecb4bcfbcc5_JaffaCakes118 unpack001/out.upx
Files
-
176f7acdc21f41906a857ecb4bcfbcc5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 343B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ