Behavioral task
behavioral1
Sample
288386e21e48cd24b2ef99bb5601c8fa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
288386e21e48cd24b2ef99bb5601c8fa_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
288386e21e48cd24b2ef99bb5601c8fa_JaffaCakes118
-
Size
692KB
-
MD5
288386e21e48cd24b2ef99bb5601c8fa
-
SHA1
2965adf3992186d3b3fac07bc86d958566055acc
-
SHA256
fbf6a9e96b6f26291e035b6163057a07e49c98b205f55119d730c914cce75965
-
SHA512
6af5e0841aafdc2e65d823f21193fa6a7f25d95c06f13b21d56c344bbd395a6df9fef89a151bbb8a328287ee6c2bf4332616f0356e9a1394761e41ea9dd17cff
-
SSDEEP
12288:/DY7EmAUypARrvlslKffIPg/7RrwXmdm9red7SXePTxsnSM2DhSt4CSVF9Kfh9oI:E7EmbFYufN7R5dIe5si3h64CST9CcTYh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 288386e21e48cd24b2ef99bb5601c8fa_JaffaCakes118 unpack001/out.upx
Files
-
288386e21e48cd24b2ef99bb5601c8fa_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 792KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 690KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 672KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 352KB - Virtual size: 351KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 433KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 966B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ