Behavioral task
behavioral1
Sample
f191568087ebe7d3c92336ffc555b64c_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f191568087ebe7d3c92336ffc555b64c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f191568087ebe7d3c92336ffc555b64c_JaffaCakes118
-
Size
87KB
-
MD5
f191568087ebe7d3c92336ffc555b64c
-
SHA1
2189d178500f58bf11363b63c0c6217316f883c4
-
SHA256
f9f82e3f82f7250b858adbc11b18b69d24e96d13a2ecbf19da6ceb1a839e4b31
-
SHA512
e8fc9e1d313672033e71c1da183f7db3fd3acbd06ec83fb8b2ab64633ce077bd9a92937152bb8ab6e772863353b98a263dceec333260727ba7c26475896d4da0
-
SSDEEP
1536:urlsVCK814wSjSSkvOM0Qcr2haSgvGR5psjD+/87IQSXgXLcbgp5WO/ihv6GwcaG:586z/kGrPSg8/6u1ZMzWO/2Vwcatk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f191568087ebe7d3c92336ffc555b64c_JaffaCakes118 unpack001/out.upx
Files
-
f191568087ebe7d3c92336ffc555b64c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 168KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE