Behavioral task
behavioral1
Sample
0590453123f0e49f7b84e397be9b80f7_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0590453123f0e49f7b84e397be9b80f7_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0590453123f0e49f7b84e397be9b80f7_JaffaCakes118
-
Size
46KB
-
MD5
0590453123f0e49f7b84e397be9b80f7
-
SHA1
2640af1d2b5adbeadd624e38fc1f860216f6a804
-
SHA256
47fb08cbd7d5cf65f1e36d481f4486d06e0142f87633c1ceece0e28d1b7ae799
-
SHA512
cfe42f32c9ec38ed11f5b58aac853522f571791df5b489217419cd4aa632959860d3254c3988e3463437815b1c42d641e9cf31243cb7f4203c061bdc83ea16a7
-
SSDEEP
768:OScJf+iKSevbhp6eqKCCyPpQ/E9EWFkeESOlP4cS6QnSh4:dGf1h+Mb9k/yFNOV4a+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0590453123f0e49f7b84e397be9b80f7_JaffaCakes118 unpack001/out.upx
Files
-
0590453123f0e49f7b84e397be9b80f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ