Behavioral task
behavioral1
Sample
164ee742cd2111b6574d8c4b4112a266_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
164ee742cd2111b6574d8c4b4112a266_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
164ee742cd2111b6574d8c4b4112a266_JaffaCakes118
-
Size
51KB
-
MD5
164ee742cd2111b6574d8c4b4112a266
-
SHA1
9b8ad52deae5677ccb9e5909f09546d1181af66e
-
SHA256
9c0d9796f078f00bc142e026c73416b9aa20ebf4da2ee3648fc74e33a1116a2f
-
SHA512
0fd610efc5438a1969a75e1606d6fa68d09a0de041d1b1a4b3f237a36048d641f533f1b17de87cc4e046850f0a21c0307149be96da4d0de66f963321f4a62cee
-
SSDEEP
768:sjtCpMIpNTmP0dRHlhD3w42Yb+VdHbaQ/hjGWOMUK+tGDoIwnQRWaliHrgh5S:sjUB3D3PlOdHbauj28yGS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 164ee742cd2111b6574d8c4b4112a266_JaffaCakes118 unpack001/out.upx
Files
-
164ee742cd2111b6574d8c4b4112a266_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ