Behavioral task
behavioral1
Sample
f662740110ead81147ce8d66e7aff1af_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f662740110ead81147ce8d66e7aff1af_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f662740110ead81147ce8d66e7aff1af_JaffaCakes118
-
Size
86KB
-
MD5
f662740110ead81147ce8d66e7aff1af
-
SHA1
94cd2fd5074ee9fd767dabf2d4cc2e53ac12de09
-
SHA256
6a4197b39d9683e0c7598c2e90b15d2d2bda50a17ea5f46a0b8a62911b016b08
-
SHA512
c2816b1cb6c6b451e1892913e1e0d1653902235d4018909bd06ae53b2296c38018b19d7867f80c849caeec060cf567c651a8de8ca7ae3ebbfb8be192ef6ea8fe
-
SSDEEP
1536:qEtStKH7YZu4WU7LiekFEfH0k4Fp1RLzjNzUfUH92KeF3crXkcUbV:ttStgcLpkiH0k41FNzUsHqF3bc2V
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f662740110ead81147ce8d66e7aff1af_JaffaCakes118 unpack001/out.upx
Files
-
f662740110ead81147ce8d66e7aff1af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ