Behavioral task
behavioral1
Sample
415581a81cc94ec30b5f4453a52a9a43_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
415581a81cc94ec30b5f4453a52a9a43_JaffaCakes118
-
Size
38KB
-
MD5
415581a81cc94ec30b5f4453a52a9a43
-
SHA1
635b2de8e2aa1e7e44c082a6f9b5ed95cd7b87e2
-
SHA256
d9a5d47e04c3dce188306fa6946a730e5b358c7c204314d1513e6eaf60ed5136
-
SHA512
d81b15315ab2d1a3338602f4cccece16ab44539b819906bf517ac93e4352ddbdb96c0de8b9bb9d32f8d8fbbd276262ea773868eba54b82a5199e7f46b8f892fc
-
SSDEEP
768:k1p0D08GDHlCqJG/EqU/sZZw+zOLASiURoW6bozPLoAr0kx0tyr/J260RaW:c408GDo+GsIXj8ASi3W6WTJ0btGw6e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 415581a81cc94ec30b5f4453a52a9a43_JaffaCakes118 unpack001/out.upx
Files
-
415581a81cc94ec30b5f4453a52a9a43_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 4KB - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE