Behavioral task
behavioral1
Sample
0160dc7c481a7a52ba444ca45bb7b70e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0160dc7c481a7a52ba444ca45bb7b70e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0160dc7c481a7a52ba444ca45bb7b70e_JaffaCakes118
-
Size
84KB
-
MD5
0160dc7c481a7a52ba444ca45bb7b70e
-
SHA1
e705256b5116856f81ffb66dc7a298a258c1ca2c
-
SHA256
1a6f01ce21ea877bd9f89d32066a9ca1e5229fe5402a88d6af1920deb194d0d7
-
SHA512
b371bb480ed26edb95371f16e68a88823090c567da76e1db9542c84326dc335423403a0ff92ce4973abb2d22013fceac896dd82dcf5f951f1d2f6b1a6fb5c03e
-
SSDEEP
1536:uHfXRwGQ+BXKoeJgdSDWji3zxKoFqhgKWP+AIQIBvdaISghZ0EIs3q/trRlXsUxZ:6JwqQASuiDxKoFqhhBTD0fx5RdsUf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0160dc7c481a7a52ba444ca45bb7b70e_JaffaCakes118 unpack001/out.upx
Files
-
0160dc7c481a7a52ba444ca45bb7b70e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 364KB - Virtual size: 363KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE