Behavioral task
behavioral1
Sample
5557d9544aa38315b8db6aeaeb91bd8d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
5557d9544aa38315b8db6aeaeb91bd8d_JaffaCakes118
-
Size
123KB
-
MD5
5557d9544aa38315b8db6aeaeb91bd8d
-
SHA1
fca34b07272c49493b5e7923a187484b2dea88c2
-
SHA256
a8643fe6349b5403ab45dc551b3e1e3169b53d7cdaf778d43e293159d182933d
-
SHA512
f27a7daeb934c17267b63e2d5c529ef81d32d77e80945a4c0d2e4997d449c5ef9b7fe0ca166c9051d65753453049c61a63464b44e715615f599153e352bc4a6f
-
SSDEEP
3072:ujG4Ma8jkePxYBTiQrpPsAw/BTKwB7Ob6mmDhFjzHIWogL2ct6U:KO2rNbw/BOWgmDTjjzogLT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 5557d9544aa38315b8db6aeaeb91bd8d_JaffaCakes118 unpack001/out.upx
Files
-
5557d9544aa38315b8db6aeaeb91bd8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 200KB - Virtual size: 200KB
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ