Behavioral task
behavioral1
Sample
fac790c92213d4d34d982f873be3dd16_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fac790c92213d4d34d982f873be3dd16_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fac790c92213d4d34d982f873be3dd16_JaffaCakes118
-
Size
1.2MB
-
MD5
fac790c92213d4d34d982f873be3dd16
-
SHA1
61fa08a73b8e2cf06f36f8f7ae003131001218e8
-
SHA256
d930359e85de5288e76556bacf502990fbf8f92391f3cc325bff843fcd9b1603
-
SHA512
e6737df169bd2b904c556258a66b77d1a234f26d8fbf9788be72f4c81f8bc44f14549bff39376240fd8f9dd6dbe6849bd1c4225c2113434f65a9d70f7e6f853f
-
SSDEEP
24576:i3HVS6pgn6RkRA4dFEcAcNCVZJIxga5CmhuDhuhfO1Ow2WJLhemBI4jww:mbpgn6Rd4dCDeCV45CmJfOt2WNsmBfjB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource fac790c92213d4d34d982f873be3dd16_JaffaCakes118 unpack001/out.upx
Files
-
fac790c92213d4d34d982f873be3dd16_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 932KB - Virtual size: 930KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 544KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 808KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ