Behavioral task
behavioral1
Sample
1f7a383a9f9d4117f4f9fcc428c19afb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1f7a383a9f9d4117f4f9fcc428c19afb_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
1f7a383a9f9d4117f4f9fcc428c19afb_JaffaCakes118
-
Size
54KB
-
MD5
1f7a383a9f9d4117f4f9fcc428c19afb
-
SHA1
65aed619ce6d31af2cf05388e0d560001336b7ca
-
SHA256
329d32f5b459253ee78d8f648161e38411a42163008b9f58bbe3c809620a1f75
-
SHA512
5644d52b03492131be03fb32dea8165e9048efdc9e36034d647aff67da1a26cebc730137bb9d1b992f94c4c2abfc0d0ef020916145eaa2f86cf36cc15b670a74
-
SSDEEP
768:YG3w1MjbWdgZU0RV/Eu9C9D2T/sXJpyvvRGvFL05VRJWYG46WEn8b49pkPmbIrq7:1AK/Eg7V/tYsadOXWmW8McmMbs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 1f7a383a9f9d4117f4f9fcc428c19afb_JaffaCakes118 unpack001/out.upx
Files
-
1f7a383a9f9d4117f4f9fcc428c19afb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ