Behavioral task
behavioral1
Sample
292a4a525d9e8c13e9768b6080787bcd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
292a4a525d9e8c13e9768b6080787bcd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
292a4a525d9e8c13e9768b6080787bcd_JaffaCakes118
-
Size
656KB
-
MD5
292a4a525d9e8c13e9768b6080787bcd
-
SHA1
a61d89f3a90262bddc46bf08c2a24408c3585738
-
SHA256
da5ebb291b53bdf1220a88cc01bd2cd057bddfa2339d452759375e31c9c23d3b
-
SHA512
e1ec422abe5c056e285125709ef5190ae342766a0b16b19c84735c0006d3fabef17a741b37617bf7d133ed5e30d4f312f3d8ac08bbc60a462667375a05c53da9
-
SSDEEP
12288:4lWgJA99JVbe/FNOWbjRGZLtBc4rU61TMj5r3xnIPk3UBKhDTQg:48wAHK/FNvblGDBc4h1shnpxDT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 292a4a525d9e8c13e9768b6080787bcd_JaffaCakes118 unpack001/out.upx
Files
-
292a4a525d9e8c13e9768b6080787bcd_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 868KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 445KB - Virtual size: 445KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 282KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 546KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 229KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 614B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ