Behavioral task
behavioral1
Sample
2f65f76429f964b5f5c040f9f91deef9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2f65f76429f964b5f5c040f9f91deef9_JaffaCakes118
-
Size
1.1MB
-
MD5
2f65f76429f964b5f5c040f9f91deef9
-
SHA1
5bfee66fa5297183b14d816b530732232aab2c2f
-
SHA256
eb38239b0860aca14a454542c739bc1658baf1ca100d1fc128e006da504a487e
-
SHA512
13744613d1e3b9de4b10105c64708f1b070df740302c3415f0c36ba15c65fda84d9e0a63fa645521e999b4dc8bc337b4e8097ff9cfddc07e9012f64caa243e29
-
SSDEEP
24576:0PPacv85bFI6fhE/As/qRGhY4lKTOmwPqRR/AxUV+KG29XyUiYGKB43Kj:Wv8lbEvqwW4lKTOm0Vxg+KG29ChE4aj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2f65f76429f964b5f5c040f9f91deef9_JaffaCakes118 unpack001/out.upx
Files
-
2f65f76429f964b5f5c040f9f91deef9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ