Behavioral task
behavioral1
Sample
2e3d569aae015988e2762573501cee84_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e3d569aae015988e2762573501cee84_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e3d569aae015988e2762573501cee84_JaffaCakes118
-
Size
1.5MB
-
MD5
2e3d569aae015988e2762573501cee84
-
SHA1
157c8398d1ef7f7accda96d4673934e5670e2c30
-
SHA256
74e7c8c15a4747ceef9e1b182f3ffa25779c257ffb9fd7591dba132d1e534022
-
SHA512
8b8c80feef7c63f05b6a7be806b52eb5295f33527311b89d7281119f76ce97c87f35d22b5cd04535433ec045022d5e3bb8e2f9409cd0eb9809fa40fcc223f952
-
SSDEEP
24576:DKUdTkefmR3gJQ+qzYXkmN9f2WK9NG6LpctG6oi9MhHClb:DKUxkefmR35+qzYUcglmtjIClb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2e3d569aae015988e2762573501cee84_JaffaCakes118 unpack001/out.upx
Files
-
2e3d569aae015988e2762573501cee84_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ