Behavioral task
behavioral1
Sample
0c00c3ffad54d475c2eca620de2985c5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0c00c3ffad54d475c2eca620de2985c5_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0c00c3ffad54d475c2eca620de2985c5_JaffaCakes118
-
Size
281KB
-
MD5
0c00c3ffad54d475c2eca620de2985c5
-
SHA1
02a778091880ab84b8f164ea5679f74a0e8105f2
-
SHA256
302d914b4fb651e85240c82748355150e51d083a4c687fad5d2c6ce6a09293bb
-
SHA512
f9df378527f27fd0d7f69193a85cf702f7a5e8bfc10009af67d40de1a340f11ac2ef6ce2108f7b0fd679b987543c78f5e607adf0f40aea74785da6a1b3653515
-
SSDEEP
6144:SJLsqoNnOsl24o02QzUseUpUrFKG4e9/FeC7t5Nk57Csqyw/qa21yQ:SRsJB3okzUcar8YJFi2sqywPfQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0c00c3ffad54d475c2eca620de2985c5_JaffaCakes118 unpack001/out.upx
Files
-
0c00c3ffad54d475c2eca620de2985c5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ