Behavioral task
behavioral1
Sample
12ef629e17e5374cdf8947717ce46634_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
12ef629e17e5374cdf8947717ce46634_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
12ef629e17e5374cdf8947717ce46634_JaffaCakes118
-
Size
521KB
-
MD5
12ef629e17e5374cdf8947717ce46634
-
SHA1
6c230f4797366af5ec794cab87e883b6679b55a7
-
SHA256
0fa40fd927ec6928a9f9b246dd2b58266875f33cc7dc6eb7bfdad412f96b1c6a
-
SHA512
18fb2df4b12e4f47a7b4e3ed4c65884c7d58ea0ccc0befcd97f42aa669ebb51592e6654cd6e0318203d4a836f91ab25d6243c645edfe3a95429d1288afb7ad53
-
SSDEEP
3072:SzbewBG1ytoE+9O4Lp8RkPgsdkvU4mXhZSP8Npe6NkkgC1kzpiRpJ:CohE2LuRkxHXvi8negkkEViR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 12ef629e17e5374cdf8947717ce46634_JaffaCakes118 unpack001/out.upx
Files
-
12ef629e17e5374cdf8947717ce46634_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 156KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 476KB - Virtual size: 475KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ