Behavioral task
behavioral1
Sample
2ffe1d31d31af427ed32c4070ddf35e1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ffe1d31d31af427ed32c4070ddf35e1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ffe1d31d31af427ed32c4070ddf35e1_JaffaCakes118
-
Size
140KB
-
MD5
2ffe1d31d31af427ed32c4070ddf35e1
-
SHA1
369e67d2634eb8379bfb01517cc2ca4b6c8e92cc
-
SHA256
c4ed3e92c3d95420230d7f725b53bd0649149afa33f61c8bc12d97ec2feff39c
-
SHA512
e53ed8d11657ef422fff23b226d532feef947caa1cca17dcd871d479e316339e63313c935f617ab1b0f301080d0c936e115c0df72742a73a5a691416db94d996
-
SSDEEP
3072:IhV8w2MjRj7j7hY+nu6zrlH512FZMOPH7c0bmbqdorradsjd5f2WHdU1mXfFV:cV8w2Mdj7RYMrlH51cd5mqdniDfxU14d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2ffe1d31d31af427ed32c4070ddf35e1_JaffaCakes118 unpack001/out.upx
Files
-
2ffe1d31d31af427ed32c4070ddf35e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.s Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.F58qG Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4 Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qr74F Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.T Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3R4yu9 Size: 1KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ