Behavioral task
behavioral1
Sample
53d8a41e41e8871e9b0a80b9829ff5b2_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
53d8a41e41e8871e9b0a80b9829ff5b2_JaffaCakes118
-
Size
4KB
-
MD5
53d8a41e41e8871e9b0a80b9829ff5b2
-
SHA1
c52b327c1e27f0afa60a821c31b2151ae3170a41
-
SHA256
ed8d133653ef25b47b98585dc6bbb5e26556f19126ef6ea497f3f88fefcb2585
-
SHA512
9d52a284554fa3032e65ad85a2afa3af200f3cb01300f8b45d7eaea70f4019f1bfad2572349f51e9a55f6586cec2e831a99d474ca2eb318ee3563777e378a4c6
-
SSDEEP
96:72/gJZFeOsMeGvDyBqrntmQ6l/3QPywJ4j:7HjeObAqrntl6d3gywk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 53d8a41e41e8871e9b0a80b9829ff5b2_JaffaCakes118 unpack001/out.upx
Files
-
53d8a41e41e8871e9b0a80b9829ff5b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE