Behavioral task
behavioral1
Sample
03e864c977550752c67ecc7a181d1664_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
03e864c977550752c67ecc7a181d1664_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
03e864c977550752c67ecc7a181d1664_JaffaCakes118
-
Size
21KB
-
MD5
03e864c977550752c67ecc7a181d1664
-
SHA1
ec7962a21e7fc86981d81f086596a29371ed824a
-
SHA256
bd7726f03b4819502e495374cbf57cfeab3f2c6cfa2bfe3a70e4bbafc3b92226
-
SHA512
0bc063f02fe6b225d0e5fba1baad300cc4600b4d72d73e329ed00986d69d94fa85ebfd53b97be54fd38041da9e57e1aaec5cd31181855d913be6570eb23a5388
-
SSDEEP
384:/pABLSoMfYUTZHWrHAs//M+m/OHUwszvj2x60/Q/NZB:BjoIYUTZ7CM1m0wseA0I7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 03e864c977550752c67ecc7a181d1664_JaffaCakes118 unpack001/out.upx
Files
-
03e864c977550752c67ecc7a181d1664_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ