Behavioral task
behavioral1
Sample
30a8a54c8e652aa2a6236fc5697f4fa8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
30a8a54c8e652aa2a6236fc5697f4fa8_JaffaCakes118
-
Size
18KB
-
MD5
30a8a54c8e652aa2a6236fc5697f4fa8
-
SHA1
ba194301304695aae7ca54cadf351ef7084c1e42
-
SHA256
c11591f8cfc676b6a00901e5864cb53d601acfb35e8fd3dfa615e74f43adb48f
-
SHA512
635b9905becfccd5ec60b313367e0dc753da92581b548dc45c6d7105409c2525e36713c426b2de7062b417b528b5289d430c7bf00f9b00b9b300a8f5eb43744c
-
SSDEEP
384:lAzf9KWr1GZmSh+lUaWWwDs1UbhMDi60NAXdR38i0GrTo9N4YquA:Szfj1yt+7W/71M8Y3N0G3nUA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 30a8a54c8e652aa2a6236fc5697f4fa8_JaffaCakes118 unpack001/out.upx
Files
-
30a8a54c8e652aa2a6236fc5697f4fa8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ