Behavioral task
behavioral1
Sample
2eb036f42d222e98534d59155fa85432_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2eb036f42d222e98534d59155fa85432_JaffaCakes118
-
Size
7KB
-
MD5
2eb036f42d222e98534d59155fa85432
-
SHA1
109227a3805d3a5376633587cffde16f6e6ea490
-
SHA256
e6e069a609bdf1eb2233ace5effc9c58aad8f75fcbe1acdf0a22755799594dc0
-
SHA512
eba6c2b47591d16bd4ea655ca16802f6f0cea4038daf40a32c4004f1c934bb0c1ec9706da8526c45b4c24df6df9ed0d631ff584e25e2290aad7aa54a34c636b8
-
SSDEEP
96:cBjOCyzryiWtqwOLpcJhasXn6PxLx8GMeIBgtMu1NNbMjZyfEBwYEaK/:cNOlyiWXLvX6ZKZKtJPbYZyfXYxK/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2eb036f42d222e98534d59155fa85432_JaffaCakes118 unpack001/out.upx
Files
-
2eb036f42d222e98534d59155fa85432_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ