Behavioral task
behavioral1
Sample
150c5fbc68edb03f4be86c1cc52cf19a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
150c5fbc68edb03f4be86c1cc52cf19a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
150c5fbc68edb03f4be86c1cc52cf19a_JaffaCakes118
-
Size
94KB
-
MD5
150c5fbc68edb03f4be86c1cc52cf19a
-
SHA1
90538df68f259dd1fcf7cd7b3bc05142c65ef0a1
-
SHA256
55b20be3bf3a6fc506697ec1b7ff912372e98a5070e9a8d834290d3fd031951c
-
SHA512
beba88dc6af76f77a0553744a950cd6e299c124c23d8faa8c561b232768fc5ffe396b8e64ff0521bcc2eeb5ea6b6561b467c2e4682dded26f901e0c869dc9b86
-
SSDEEP
1536:f2l4xFDF87M6bfl64+15bN4td59+OCebk+WZRO2u/cctKfkgbqz/F/:fikB36b9tT3Mb4xaROdq8gbqZ/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 150c5fbc68edb03f4be86c1cc52cf19a_JaffaCakes118 unpack001/out.upx
Files
-
150c5fbc68edb03f4be86c1cc52cf19a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ