Behavioral task
behavioral1
Sample
443e7156cf5b68fe59510b3f9702ed78_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
443e7156cf5b68fe59510b3f9702ed78_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
443e7156cf5b68fe59510b3f9702ed78_JaffaCakes118
-
Size
56KB
-
MD5
443e7156cf5b68fe59510b3f9702ed78
-
SHA1
51668e653cd3a2e16cc1be782a9e23237277cf4c
-
SHA256
243ad1bf4edb489749be5c1ad775d0fe7457a087ea4a47829d7c103cade007e1
-
SHA512
01d7920f4232a0413d84098f3bd3259c1323d1a4b8cd4ee44090901c86ac7080ba10d5d36ef9954ce013dfe07b8861898f9f836cfeb28adf9f9b609ef2505559
-
SSDEEP
768:WG3w1MjbWdgZU0RV/Eu9C9D2T/sXJpyvvRGvFL05VRJWYkhCQ3yCglmf8GiPqEi0:rAK/Eg7V/tYsadOXWkZCglmKyEiil
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 443e7156cf5b68fe59510b3f9702ed78_JaffaCakes118 unpack001/out.upx
Files
-
443e7156cf5b68fe59510b3f9702ed78_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ