Behavioral task
behavioral1
Sample
0b3c29bd8d4c05e9bed24a63e35437cd_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0b3c29bd8d4c05e9bed24a63e35437cd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b3c29bd8d4c05e9bed24a63e35437cd_JaffaCakes118
-
Size
279KB
-
MD5
0b3c29bd8d4c05e9bed24a63e35437cd
-
SHA1
7d992a1aa56ab52093454d8520b140f5fc758612
-
SHA256
4e7c65a13920d40af7c7a504af3cd0ee75cd78703d81e5f013759f39038668af
-
SHA512
67db2b29ed06d85a6ac0f5a061c638814cc6092f7d170e8f1a78b39176ce55b2d1d5403ed587b58a0384a52ee91254d76810117f0afb6d9c21e173fca20bf560
-
SSDEEP
6144:Fi3n7aWEQm6kTwrCxSZxwl39u2j0X3dTMiYSKjj9z0JQ0XvE:Fi3waxT3dLYSKjBQDX8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0b3c29bd8d4c05e9bed24a63e35437cd_JaffaCakes118 unpack001/out.upx
Files
-
0b3c29bd8d4c05e9bed24a63e35437cd_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
data Size: 538B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bss Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
imports Size: 810B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
relocs Size: 330B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resource Size: 520B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ