Behavioral task
behavioral1
Sample
15805e2543fce27eaecc6d6a92d0f3a0_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15805e2543fce27eaecc6d6a92d0f3a0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15805e2543fce27eaecc6d6a92d0f3a0_JaffaCakes118
-
Size
6.6MB
-
MD5
15805e2543fce27eaecc6d6a92d0f3a0
-
SHA1
54b9b223e979a566d46226d028ef5e8f0774343a
-
SHA256
0f063b120743900d61226a76dd5b33704fad6b015973ff12edb9f72a6f77f9c0
-
SHA512
63280c187b50e86cf50f62e14506a71febc1859e2c426e807b2f5c6f6ebfef02debc761b3a1a88f67584aef076fbcfb4ee50a377c0021e9053979b1980b5928e
-
SSDEEP
196608:NN2hm4wIiVTxBU7NYewi84SGOrN3u6YydkFmV6a:NNW/mG7gezOFDVz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 15805e2543fce27eaecc6d6a92d0f3a0_JaffaCakes118 unpack001/out.upx
Files
-
15805e2543fce27eaecc6d6a92d0f3a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ