Behavioral task
behavioral1
Sample
0f933ae72858c1197ed0e01202763c69_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0f933ae72858c1197ed0e01202763c69_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0f933ae72858c1197ed0e01202763c69_JaffaCakes118
-
Size
62KB
-
MD5
0f933ae72858c1197ed0e01202763c69
-
SHA1
583d352ea1cadd79811e7bc083f9a6ef62cb57c1
-
SHA256
9312e218aee687021dcf423e21bc5436208c6c1aaddad6549f438f671b0fb976
-
SHA512
32786f772f913ed0f028c5aed6e0ad603e4a54bd82ed2285358ce20f32d1da0618467896cc4e271df257039dd58aebcbe2bd94bfe98d1a02d62ca0354599e998
-
SSDEEP
1536:B1fFPj3gJKOiOvN3Ty7Gfw21ix9p7AThUU/:fFPj3gJKOV3T0GufFAT6U/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0f933ae72858c1197ed0e01202763c69_JaffaCakes118 unpack001/out.upx
Files
-
0f933ae72858c1197ed0e01202763c69_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ