Behavioral task
behavioral1
Sample
2eb670063b0e80f31f9565eb8432d91e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2eb670063b0e80f31f9565eb8432d91e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2eb670063b0e80f31f9565eb8432d91e_JaffaCakes118
-
Size
11KB
-
MD5
2eb670063b0e80f31f9565eb8432d91e
-
SHA1
bcf5c28d93d532dd0660cc298cd99ca4c1be0100
-
SHA256
b428ca841f54ff91c228b0129dbcef587e9e9e680c7cdf9e922c87955aabe64b
-
SHA512
6f0b1600a443c5e04f81e17bf792087466807f13b93347b32b72369529d3c1a8afdfe9691eb82dae3bb7c2b3e7fba5d377bfd8be9db64d935691ca8987a1c05e
-
SSDEEP
192:+L2JO/D9W5/kB8BjFcIeCpZAFwWcyssHSlvAUohvhYWmUnje:+P/hG/uIppVsL8vAUohvhYWHje
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2eb670063b0e80f31f9565eb8432d91e_JaffaCakes118 unpack001/out.upx
Files
-
2eb670063b0e80f31f9565eb8432d91e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ