Behavioral task
behavioral1
Sample
15084cfd6264d78f2c95ab2a63b9a74b_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
15084cfd6264d78f2c95ab2a63b9a74b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
15084cfd6264d78f2c95ab2a63b9a74b_JaffaCakes118
-
Size
29KB
-
MD5
15084cfd6264d78f2c95ab2a63b9a74b
-
SHA1
a42c205b4b47c183b25e96ca54eedba0d91552cf
-
SHA256
ce137971bf868254fa6e620b59c55f93bce324c991c9f6949096344c58f158d3
-
SHA512
2c0fc0ba376ac6366ddde5c3f7f33cd847da3ee123c9553fac0af98de4dd97ee8eb681764213d0d92d6d1360efcc1012cfe20b4e14442609dfc71f9d4517acef
-
SSDEEP
384:IojN2Rg0jPByvaoOHYxw4J0KdXu+FgbQ8CXf5Z/hErSDWDkmaQF3tZJvRF:rUEvaoOHYExOg4f5Z/arNKQF3pD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 15084cfd6264d78f2c95ab2a63b9a74b_JaffaCakes118 unpack001/out.upx
Files
-
15084cfd6264d78f2c95ab2a63b9a74b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ