Behavioral task
behavioral1
Sample
06159faeccae9687053e46535b5a7320_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
06159faeccae9687053e46535b5a7320_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
06159faeccae9687053e46535b5a7320_JaffaCakes118
-
Size
528KB
-
MD5
06159faeccae9687053e46535b5a7320
-
SHA1
0bf9f70d066ca61c87b4791a2044dcf1396a0cb5
-
SHA256
2949cada616be7fd914207bb7c47d3237e98ad7cf9aad9970ad3f7640c298d9c
-
SHA512
3c3bd9e21c929d9497388af95b1db06e8f91f481d711019d430055b9261fcab3ba664f9213a7667d57c1858c8e3e2a527b1b7ad4f9cd239e2036e48dd71a046f
-
SSDEEP
12288:LCp6ZXPL5tC3y+mKt7QwE6a1kUshx6vffkM:LCm/La3y+mKtA1q/uL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 06159faeccae9687053e46535b5a7320_JaffaCakes118 unpack001/out.upx
Files
-
06159faeccae9687053e46535b5a7320_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 186KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 339KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ