Behavioral task
behavioral1
Sample
375e8bd944657f4bf8912103e8502652_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
375e8bd944657f4bf8912103e8502652_JaffaCakes118
-
Size
792KB
-
MD5
375e8bd944657f4bf8912103e8502652
-
SHA1
0e86dc2eb0ab47d3ea04ae0ca75c4d1812d7737e
-
SHA256
a0cdaf5e0f83b5b09fae7a0f5b1eded496320baa0462a30ada20ccd495f2c2c4
-
SHA512
a525559a0c326f42b3085fedffe0acdaaab303c2570d7df3bbb86d5ea5e524e4fcc422f6d6655f4400d63dace8e7dcc83a37f07e5d91c36153b7a2b4460b0d7d
-
SSDEEP
12288:v5/uqMx3tjHenl+gld9eQv3j3HsATQYzNSQNgKUPzAlkWDpjj6ZayhNteoanm/A0:ZuqM/qt3j3dTvFwzAllh6Zaqvwm/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 375e8bd944657f4bf8912103e8502652_JaffaCakes118 unpack001/out.upx
Files
-
375e8bd944657f4bf8912103e8502652_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ