Behavioral task
behavioral1
Sample
ff608b48277a55c95fbf8615a6098af3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff608b48277a55c95fbf8615a6098af3_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff608b48277a55c95fbf8615a6098af3_JaffaCakes118
-
Size
23KB
-
MD5
ff608b48277a55c95fbf8615a6098af3
-
SHA1
dbe99ffe62c98fca2a2f4cf4d377d659f3de9159
-
SHA256
eafc8ad1019ab5050c1d6ca8205667096558f45aa949e5960064098907cf726a
-
SHA512
f08bb63b89ff4bae5a37214e0a81c5fc777fca53fae457f1e4d431cc910a3959b62e9c356dbdf2dd90c0f1ed0c0a3cb5f1625cf71112ee76a34e323bb698e068
-
SSDEEP
384:EGUInDfWvVjFtufOjjXgYmFBHHjf/WQSzgM/TqFiFl0abdEGfdxO1b1s:dtnDfMqfwgRjf/WxgMr+id6udxOZ+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ff608b48277a55c95fbf8615a6098af3_JaffaCakes118 unpack001/out.upx
Files
-
ff608b48277a55c95fbf8615a6098af3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ