Behavioral task
behavioral1
Sample
0fa9c751e0fe84b3ba2e5154bcbdb16a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0fa9c751e0fe84b3ba2e5154bcbdb16a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fa9c751e0fe84b3ba2e5154bcbdb16a_JaffaCakes118
-
Size
224KB
-
MD5
0fa9c751e0fe84b3ba2e5154bcbdb16a
-
SHA1
33f3b4aefabdd39acc226f6574940398807cf6dc
-
SHA256
478096e102d5b020dde36490f09eb4a499c78d08ec413091bfed5af415585cad
-
SHA512
1ffd4240b65a13709eb51dd8233130576534fed10193f4b9828d926962ae4b95a15843bc8641fe5c10aba39075c6ce7857db8750b4e14aa96f3c07a4d8e9f554
-
SSDEEP
3072:xsV78Hx8dvdpipboxkNZd78faHCJANlVsXrfesjG7nwNdVBqkzz:RxUdZxkNb8dmt+x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0fa9c751e0fe84b3ba2e5154bcbdb16a_JaffaCakes118 unpack001/out.upx
Files
-
0fa9c751e0fe84b3ba2e5154bcbdb16a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�PX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.test Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ