Behavioral task
behavioral1
Sample
2a812a406df8317b2277a2070b331108_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2a812a406df8317b2277a2070b331108_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a812a406df8317b2277a2070b331108_JaffaCakes118
-
Size
417KB
-
MD5
2a812a406df8317b2277a2070b331108
-
SHA1
49318500ef030ca7fc72eaeab8606186fb85d8dd
-
SHA256
db10dd79d62c87b7c08e679d954157322ee357a3152bd350fc8fb6d7619fe234
-
SHA512
52613dcbbcdbc13c15b250903296b6638919237b8bb83352e0fb1df4f9b7af07242b6fa87c9f71f54245af1c5140ef7d93a64e51fd83a0937d545f6e4a2a4be8
-
SSDEEP
6144:5uHOzB7nmy+g4IE2E5uHOzB7nmy+g4IE2EwpwS:gOzB7agOzB7aRS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2a812a406df8317b2277a2070b331108_JaffaCakes118 unpack001/out.upx
Files
-
2a812a406df8317b2277a2070b331108_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ