Behavioral task
behavioral1
Sample
24f464d6d13bd88f299acb1e6969a4f4_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
24f464d6d13bd88f299acb1e6969a4f4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24f464d6d13bd88f299acb1e6969a4f4_JaffaCakes118
-
Size
1.0MB
-
MD5
24f464d6d13bd88f299acb1e6969a4f4
-
SHA1
11ec382cac30491496bb96a8b2e778d8ce15ad7f
-
SHA256
8ae403d402e61128ebbedf77da398b6dea29679aa24cb2385c53b8320441bc85
-
SHA512
a0ab91c80c26536c40f59c4485bb69fec5f281e8aa06b3f7ee6a8eccd98c44add6c39799e9eb2d80d60ce9fa303807b8a054e78620afdc8d8fb2f634b32e4c62
-
SSDEEP
24576:G7Mq9gM9SjTT0E8+Y0cB0WPEIJXKv+Ytx6FOgHSJxJUq/:Gwc7+MBRTJXKvy8gHSJxR/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 24f464d6d13bd88f299acb1e6969a4f4_JaffaCakes118 unpack001/out.upx
Files
-
24f464d6d13bd88f299acb1e6969a4f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE