Behavioral task
behavioral1
Sample
28fd06474d19660455c04e0ff5f1183e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
28fd06474d19660455c04e0ff5f1183e_JaffaCakes118
-
Size
684KB
-
MD5
28fd06474d19660455c04e0ff5f1183e
-
SHA1
b152b3e6ff79366f23408f9ab73e12d92aff0468
-
SHA256
d1d4633cbdf2def1ff91c730b85ba283c350474536cc31f346c1c82ea38d91fd
-
SHA512
ff43a316e44b7a4f852b26604395a3979b52879243c2727bfc5c68e8777def61b46ce7afb29a3d932e9e7a9a69b1c1d9d506aa8e5bd9545e8bf202d52a44acde
-
SSDEEP
12288:6wCx1hyuG/nSAFiFjbhLbeT6kq6fkCtOC9iBj9RROyCAb4t4xfqHfvQ7m+6qi/Vv:+1hyKF1eX2Cv9S9+gb5qg7mxqi/VeM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 28fd06474d19660455c04e0ff5f1183e_JaffaCakes118 unpack001/out.upx
Files
-
28fd06474d19660455c04e0ff5f1183e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ