Behavioral task
behavioral1
Sample
38d1f2bcae91b47c729df4ab4b98cc0b_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
38d1f2bcae91b47c729df4ab4b98cc0b_JaffaCakes118
-
Size
1.6MB
-
MD5
38d1f2bcae91b47c729df4ab4b98cc0b
-
SHA1
65d616babc085597d5cda72725124104585c2477
-
SHA256
ce1aa29dbd8fbe95aa7b85d045f536a2c4e9868e1ff6a4cd4274da8f1ab76216
-
SHA512
1feda084642dfc1b056ecd8a684315d30037320d88550f307ecd2e6123c91ef8f694614f56bc12014206701142c24d1df7345102ec6daadaa9b3044103da1fb3
-
SSDEEP
24576:AdOOXY8qxZBVKwYiZs33buRJyEyFierV1gS9o1NOdmJ/TY:UnoK4Zs33oJyxXrVR9qNOdmJr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 38d1f2bcae91b47c729df4ab4b98cc0b_JaffaCakes118 unpack001/out.upx
Files
-
38d1f2bcae91b47c729df4ab4b98cc0b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 405KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 609KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ