Behavioral task
behavioral1
Sample
16ea8f934f5c429b20a8dfd089701242_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
16ea8f934f5c429b20a8dfd089701242_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
16ea8f934f5c429b20a8dfd089701242_JaffaCakes118
-
Size
82KB
-
MD5
16ea8f934f5c429b20a8dfd089701242
-
SHA1
e53e0d252a55903339b8e62fabb3353f1489b72e
-
SHA256
c5ae9a4a655160ef47057f2bd0c35ee29a2cac85f3de60a1dffb5e947b8be92c
-
SHA512
19e8707e0c861dd17e6ac2434b5eb7f6d46c7bf602a2ab1878084cb3f264e7300b18ca1873cd71554870e9306e47ebee81d2e63a1568645f18a51cfb786c7245
-
SSDEEP
1536:UM2/0Ur6uA0Gg72vgx3XGn9yn18C67i84M2yO/+nJhAcaN9KvXwGidUWWb:E/0a6o7KS3XGn95C6WrM2ye+3aN0vXwA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 16ea8f934f5c429b20a8dfd089701242_JaffaCakes118 unpack001/out.upx
Files
-
16ea8f934f5c429b20a8dfd089701242_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ