Behavioral task
behavioral1
Sample
30d89355cef272a606b2c17567227b4e_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
30d89355cef272a606b2c17567227b4e_JaffaCakes118
-
Size
80KB
-
MD5
30d89355cef272a606b2c17567227b4e
-
SHA1
a2d8a90b82a1dd8a99c40e1d8a3441fec24efc11
-
SHA256
b3e5e567f5b1fb7f83621766576895903adf6b5658c493e0df68917178a92b72
-
SHA512
4d60389e4251440063c3a83110c70029cc35b92b90b34d9ce48275b9ba1b3775b914853d616413b998ba8406d282d507af727fd8da97d43f612a0db27cc29f41
-
SSDEEP
1536:/v2+Bny81d1hMo3KlX8ssfxkg6ytKe8ZZ/Q01+/zHvaA1TlTcgaM0OKrp+soAt+M:/+65rfupdreA/QPdJaM0OKrpuAt+M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 30d89355cef272a606b2c17567227b4e_JaffaCakes118 unpack001/out.upx
Files
-
30d89355cef272a606b2c17567227b4e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ