Behavioral task
behavioral1
Sample
a8f0e0cfaf08e159a5619c9536d5f871_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a8f0e0cfaf08e159a5619c9536d5f871_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a8f0e0cfaf08e159a5619c9536d5f871_JaffaCakes118
-
Size
74KB
-
MD5
a8f0e0cfaf08e159a5619c9536d5f871
-
SHA1
259b9c699808c557c89130a1122a87be916ef252
-
SHA256
5e588f305ba3bde60c937373bd37eb37e54b4b325a8c35bcb26d07dc710398e4
-
SHA512
04dd1bd7de81b1a3087b9ddda0d14aa8c0949cf075d25eb12d72814148085acfdd6a9a38c8545446ea877fdb69c0c14336d69b601e13464a85561a62c1d9cbef
-
SSDEEP
1536:uP3C75n6UGB8M/kLu9qtz5IsH6aEu4afE91rkc3/oclgRV905bPy+9GBq:8Sx6UG+Fu9qwIXfE/kc3/ov2e+9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource a8f0e0cfaf08e159a5619c9536d5f871_JaffaCakes118 unpack001/out.upx
Files
-
a8f0e0cfaf08e159a5619c9536d5f871_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ