Behavioral task
behavioral1
Sample
085be6a745b1b55f98cf39f4f1426815_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
085be6a745b1b55f98cf39f4f1426815_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
085be6a745b1b55f98cf39f4f1426815_JaffaCakes118
-
Size
606KB
-
MD5
085be6a745b1b55f98cf39f4f1426815
-
SHA1
55a266cfb0ac2e82764623517c906f56422bde70
-
SHA256
16f1c44614dddc7d632fcc387e1bb5ee2e3418d3b5028c945c91444d0c121737
-
SHA512
be0a22bd9badd138cd9d4f1f0470b4d7fa404113913757027f9bd546d277ab117af161147876a819bb18f7e56ab5973008151b4b9dcef2e9cc9518cb81cd69dd
-
SSDEEP
12288:f5QSYTJ7o9LEBS5TpNbP5SQFVW8A7hV3IJCbvjzVFq2jbCxog:RYTloWBOTpRRSQFVG7/WCbLzjq2nCxb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 085be6a745b1b55f98cf39f4f1426815_JaffaCakes118 unpack001/out.upx
Files
-
085be6a745b1b55f98cf39f4f1426815_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ