Behavioral task
behavioral1
Sample
231ae524c1338481062ee7cea0394aef_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
231ae524c1338481062ee7cea0394aef_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
231ae524c1338481062ee7cea0394aef_JaffaCakes118
-
Size
106KB
-
MD5
231ae524c1338481062ee7cea0394aef
-
SHA1
5c2ebf9e3bb66afffc1e4cb9c1370165d3bc83b5
-
SHA256
1edb4732d0eb6ef23900d9a730775c86e2ec8f2a410ff13a8dfc9604d9594695
-
SHA512
be53dd3fe06a233ae0d5b214fed5f0d73400a8f8dfc2fbf48152a24a69291b9430eb7ff4685d305afbe2bec1456418b948221291689bfd6108c6a08dc1b99007
-
SSDEEP
3072:3pr2ixArzvoaqxLRT2iOw2ve+F0R6+fRBceyqh:Zr2HwDdT2rw+ei0R6+fAeX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 231ae524c1338481062ee7cea0394aef_JaffaCakes118 unpack001/out.upx
Files
-
231ae524c1338481062ee7cea0394aef_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 104KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ