Behavioral task
behavioral1
Sample
4353ed7bdf9367c90f7c7bb2b3d839d5_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
4353ed7bdf9367c90f7c7bb2b3d839d5_JaffaCakes118
-
Size
51KB
-
MD5
4353ed7bdf9367c90f7c7bb2b3d839d5
-
SHA1
9a846b3bd6777dc84fbe65169ff14dc49fd9012d
-
SHA256
a8ff94e6175fd75932ae80fff99ff0d112408b43564191474830a6da21a734db
-
SHA512
cc44502b1f535407dac22f3589dc4588cc414b28f80fe836ba8c94790d4d86e89d1eece9dcd6ebd88a7382b5a9459009a2e44f890863798b25f1c94479ad37ca
-
SSDEEP
768:UbnM7qxusbVN43QCXq1MiWxDrVKfpEgG:UzUqb03QCS9MDBKBBG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 4353ed7bdf9367c90f7c7bb2b3d839d5_JaffaCakes118 unpack001/out.upx
Files
-
4353ed7bdf9367c90f7c7bb2b3d839d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ