Behavioral task
behavioral1
Sample
05d3ff64da0d8212ddb8894177c1699a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05d3ff64da0d8212ddb8894177c1699a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
05d3ff64da0d8212ddb8894177c1699a_JaffaCakes118
-
Size
62KB
-
MD5
05d3ff64da0d8212ddb8894177c1699a
-
SHA1
c5c8e880ca46690e27e088af4b32cfa1cca64dc8
-
SHA256
745a8ff015b4fe70ea536dcbaa76ff62d81e6b7687ba7892cf3ec66048eb58c5
-
SHA512
3019b167d5c51614b04c93d5fdfcb1405fc44c924672d331f5b0f394ae0c89e576c00f4757e420613751a08fc75afc46b977de8a0a63ec76f63995b731b91696
-
SSDEEP
1536:26Wf2aY+LdPtCoiqr3cjXa5iwnyCMplxkc6tcBG5:26Wf2a3LdiqbcG5i5CyxQtcY5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 05d3ff64da0d8212ddb8894177c1699a_JaffaCakes118 unpack001/out.upx
Files
-
05d3ff64da0d8212ddb8894177c1699a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ