Behavioral task
behavioral1
Sample
3eab384c208a19571421d84804ce9a2f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3eab384c208a19571421d84804ce9a2f_JaffaCakes118
-
Size
98KB
-
MD5
3eab384c208a19571421d84804ce9a2f
-
SHA1
d405ce41f14af982fe9d7cb90c5ec2db4a460280
-
SHA256
8c90153230766563192d11bb93376b6f5e61aaeccbd44de0a35c14c37a421406
-
SHA512
45627e979c3d4f2aa96703f0c9d118381530805dda41de1fdfcdf429e9fd64c356806c659ef78cc33ac2a3d370c25d4bdc343c8effe520c68febd094863148cc
-
SSDEEP
1536:fKzep/8Gn6eW3OM2cOJMJXefCM7LQGZ8ChZIPZuJUO21YN11Kx0Zw:fKv9DVdJwGZuJ71vYx0Z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 3eab384c208a19571421d84804ce9a2f_JaffaCakes118 unpack001/out.upx
Files
-
3eab384c208a19571421d84804ce9a2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ