Behavioral task
behavioral1
Sample
2920c3aedcbe8832a8e521123beaa089_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2920c3aedcbe8832a8e521123beaa089_JaffaCakes118
-
Size
96KB
-
MD5
2920c3aedcbe8832a8e521123beaa089
-
SHA1
c04dba5d69b17e1fca699ed63c2bbec78bed37b3
-
SHA256
9a9c4c03070deb7382d00dd6c09a755ebe963c4d308ae3b50246deb1cb205754
-
SHA512
155d11f7f40ad4b4891b25dc630c41d18e396a9e780eddb3684b30c074bcad25e5947b98a9dae66653ec61bd5e1e944ee4ba94c8991a499e92891dbfddfd044b
-
SSDEEP
1536:yH2hU9LnZqoAZjg6UGmePPYJaEy+70KYAoRGsF+FoW1XRg3HzATq9rb0ov:C2hkqoOseMaET70KgpIr1XRgX/N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2920c3aedcbe8832a8e521123beaa089_JaffaCakes118 unpack001/out.upx
Files
-
2920c3aedcbe8832a8e521123beaa089_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ