Behavioral task
behavioral1
Sample
2d19124d62e76a0ae33e5642f0c73ddb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d19124d62e76a0ae33e5642f0c73ddb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d19124d62e76a0ae33e5642f0c73ddb_JaffaCakes118
-
Size
145KB
-
MD5
2d19124d62e76a0ae33e5642f0c73ddb
-
SHA1
4ebcfebc2c6642d438c17b7e1596fefcb9ae1afb
-
SHA256
5328d6a5221c05f7ac9654ba597fb5d92b07d631ca94116b72d0a127bf913312
-
SHA512
6d04f570db591c8f84def7ffe071cb6ca124b00c6d2cf11230348e487382ff98f18ef7f14d6921543f259319f4c2b37bf004f2f996ddb0f424fe2cb0f4f76833
-
SSDEEP
3072:9ykb23UPDxZExPhzVTVpw0pW2XiY49MZ66TJ0A7MKYccJS3zQvZ9OW:T6gDxqxPhRhpw0pDXiYVg237MK2Jfvnf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2d19124d62e76a0ae33e5642f0c73ddb_JaffaCakes118 unpack001/out.upx
Files
-
2d19124d62e76a0ae33e5642f0c73ddb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 616KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 508KB - Virtual size: 507KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ