Behavioral task
behavioral1
Sample
2da09f851563045aabdc9eed119446eb_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2da09f851563045aabdc9eed119446eb_JaffaCakes118
-
Size
369KB
-
MD5
2da09f851563045aabdc9eed119446eb
-
SHA1
a6a6847c1109d60492c2eb5a6c711dae61d11216
-
SHA256
6c85cc1aaa423f71d5e9d777a718d81ce64a1e17d8f5b02ac2903d1b1312bc38
-
SHA512
17175c8dd9258efcb459982b917e3cd58ef70280747e8e4e2dfc5c62d91bc572a13e1a40008cfb96fbae4fcedd53cbce4cec554b4633bfe39a4cb297b9b80e8c
-
SSDEEP
6144:xD42f9jhYpFF8MOwVxZpoWQXRe/6pSABGCgKaKCwERJGysHOurnH2RBYjGyHWDk8:54kFMOwVxCeSSABlJYbJyOurTj+DkXaP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2da09f851563045aabdc9eed119446eb_JaffaCakes118 unpack001/out.upx
Files
-
2da09f851563045aabdc9eed119446eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 672KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 342KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 592KB - Virtual size: 588KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ