Behavioral task
behavioral1
Sample
260376e7b963634b2e78913864ae8407_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
260376e7b963634b2e78913864ae8407_JaffaCakes118
-
Size
60KB
-
MD5
260376e7b963634b2e78913864ae8407
-
SHA1
26308995d2aca0047c2542d8d742b5b5beca9cfe
-
SHA256
b1fdc85fc6ea9437c185e8df1e26c486076a1042a1a4b895ce8f6af585b3d4a6
-
SHA512
d38064ce45315ea911f93e2d6fd5f5bb8421f563e23aa6a7cb0fee1129e4d8c9fba5509f3b9fab684d2ffdd214ba0977c5136b49b7384faa081b741ea87a86a9
-
SSDEEP
1536:HFWwOSLvSc17u3NQ1yzsiUZQELPD3HyuO:3mc5u3q+svZBLr3SuO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 260376e7b963634b2e78913864ae8407_JaffaCakes118 unpack001/out.upx
Files
-
260376e7b963634b2e78913864ae8407_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ