Behavioral task
behavioral1
Sample
3d14942abe0322b420e57aa0ba2e1e8e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3d14942abe0322b420e57aa0ba2e1e8e_JaffaCakes118
-
Size
370KB
-
MD5
3d14942abe0322b420e57aa0ba2e1e8e
-
SHA1
12994137187c21ac852d79fc73c30d36d50e6b0f
-
SHA256
6274386c85532c1b4eec32a742f71b1ddc233f6adad8a7547aadacac381d298c
-
SHA512
2a9dc7989fcc26c86a4af44fb148779c0ad2fbce7b1e38a889bc465ff5774a5e0f17dd21127de89c087b0275161c78ffce194dc0785960515147e0c2d691de67
-
SSDEEP
6144:ITCdpWWjzQyHkuk6ELnMjTO0q0o9+P0D4PiC9hVPTPD5e21/SE3CwY8jqh8Z4+S:IuDWWHQyHkf6Ep05e+PlPbvVbPD5e210
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 3d14942abe0322b420e57aa0ba2e1e8e_JaffaCakes118 unpack001/out.upx
Files
-
3d14942abe0322b420e57aa0ba2e1e8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 334KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 480KB - Virtual size: 477KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 644KB - Virtual size: 642KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ