Behavioral task
behavioral1
Sample
21ed92809b71d406a542d62efaac74fc_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
21ed92809b71d406a542d62efaac74fc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
21ed92809b71d406a542d62efaac74fc_JaffaCakes118
-
Size
55KB
-
MD5
21ed92809b71d406a542d62efaac74fc
-
SHA1
9b8e15f37e407db1afc1246dec953c7cbf4c5679
-
SHA256
d721ad6c9f5981895b5cc2ac76f9b56b32ca92b253783ec6c2ae41f39eac76f4
-
SHA512
c17f81a780b2247cb9f5aaff7bcbc2b59d2fe1d80957549e9f0798eff12298d5e7c99ce6861220576b8c514c07bdbaaae42baffd88178fe273dbc5c4e0bcb2a1
-
SSDEEP
1536:pEKeb460UOBS3Fv2HL5DfTFpNUbpizk1hfU7:pELJ0VBSx2H95pN6pigI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 21ed92809b71d406a542d62efaac74fc_JaffaCakes118 unpack001/out.upx
Files
-
21ed92809b71d406a542d62efaac74fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ