Behavioral task
behavioral1
Sample
283d5b69d945c9e61c74128100a3e71b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
283d5b69d945c9e61c74128100a3e71b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
283d5b69d945c9e61c74128100a3e71b_JaffaCakes118
-
Size
39KB
-
MD5
283d5b69d945c9e61c74128100a3e71b
-
SHA1
8054e21f55bec96db326dc0c213120fac1326180
-
SHA256
3cf3100f5728869e61dcde9e7bc10bb3cac69e5a22812f2559856cb826f8ac3f
-
SHA512
b1f237125b82066abdb58bfafda31a57b8eb72ec1c55c0f0302ae8761ef3869afee6ef4b3eaeff169d1fe3ac2295b266e632b976bab5dc175da5dcd721ec036e
-
SSDEEP
768:wlUKyN0T2GwBSv7bZejD6ksJaMqAQuTGTUu0mrhHpi:KUF0qoDbZi4T00q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 283d5b69d945c9e61c74128100a3e71b_JaffaCakes118 unpack001/out.upx
Files
-
283d5b69d945c9e61c74128100a3e71b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ