Behavioral task
behavioral1
Sample
f73f36b7592d23ca88f9af3a0ef4e217_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f73f36b7592d23ca88f9af3a0ef4e217_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f73f36b7592d23ca88f9af3a0ef4e217_JaffaCakes118
-
Size
88KB
-
MD5
f73f36b7592d23ca88f9af3a0ef4e217
-
SHA1
ca14302c3d80935cda2225b0be55535a95865dba
-
SHA256
3ce0f08ecc2d7e0544c45dd955fe639ca72ff51e28530253d356d53ec58daa8a
-
SHA512
c3f2eb430ac3c1e779a4db3d0a7b89f07109911f307e97116e81f918be6262322f613bbe9bed020345cc9f105b400ed07fd763b6b9a946dc29f6712307e61a6e
-
SSDEEP
1536:U0B/sH7w9TKLEaX64ALQZBEI2zFx1RQVc7jw+2sSXYKh1eeQkvAoW7DNM4hUxYMG:U0B/sH7NLfVUzIiF/OKjO95Pee9+DUPG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f73f36b7592d23ca88f9af3a0ef4e217_JaffaCakes118 unpack001/out.upx
Files
-
f73f36b7592d23ca88f9af3a0ef4e217_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 168KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE