Behavioral task
behavioral1
Sample
d7e2ef7729a25992f579f2b758f1493a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d7e2ef7729a25992f579f2b758f1493a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
d7e2ef7729a25992f579f2b758f1493a_JaffaCakes118
-
Size
281KB
-
MD5
d7e2ef7729a25992f579f2b758f1493a
-
SHA1
67123c505ec652b527d3a3254f1fd3ec238614f7
-
SHA256
4af43ed03233e9535148239203da06ab0d2e2aa49b92a23600f75bac47fa140b
-
SHA512
b479e4662f8949f31e5007fa9cf30d4c181da1a0cc5e9b09ba6c0279de91bfbbbe4e0aad1ca734c785ab57c4e59c9c1b1c04c24bc3001735908c143aeb981b51
-
SSDEEP
6144:SAyarAZ7O8F3hlVQYkGHzLKcpcddP41Zy7JB+cF1HBycjdv78:SA/rm7O6R5TLKcpcQZEPTF1s2dv78
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d7e2ef7729a25992f579f2b758f1493a_JaffaCakes118 unpack001/out.upx
Files
-
d7e2ef7729a25992f579f2b758f1493a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ