Behavioral task
behavioral1
Sample
037ec16e76050a4e13b9743f779cc984_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
037ec16e76050a4e13b9743f779cc984_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
037ec16e76050a4e13b9743f779cc984_JaffaCakes118
-
Size
15KB
-
MD5
037ec16e76050a4e13b9743f779cc984
-
SHA1
aaf42a2381c4a6ba3664a3d059966901d8b8f4cc
-
SHA256
1a681486b51676ad8fa30363f17b8001f014e00c1142cc1e165a3170c86a00fc
-
SHA512
8bae3bb2a6cd70a8d1d2f80e9a5aaaffa165a181a2c891638df40b3e5da9c802c35ddd6bb8f256824012701ae0b605d71119b7d2f73dbcad1cb3bd5e59b29ed2
-
SSDEEP
192:Vk5V2kMzM7LJ3wVPqifI/x4sNPNZJBafeeQ:mV2kMzMhiqifIJZNPNZJBafeZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 037ec16e76050a4e13b9743f779cc984_JaffaCakes118 unpack001/out.upx
Files
-
037ec16e76050a4e13b9743f779cc984_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ