Behavioral task
behavioral1
Sample
30a1ffc3025ddb27f5cd65446b91a120_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30a1ffc3025ddb27f5cd65446b91a120_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30a1ffc3025ddb27f5cd65446b91a120_JaffaCakes118
-
Size
120KB
-
MD5
30a1ffc3025ddb27f5cd65446b91a120
-
SHA1
957b2e67052587f6c6258c86cecb985a91e2398f
-
SHA256
4dfb3e71e9aaeed537d38c651f4b48dbdfc1c2ad464ab6407c74e28deb748b49
-
SHA512
3f5575204cca37a2461ab9556b1fb7a3788316e39e8050085d9933fd98a885551801bf3f9c81e04e467c20cf7b4225f320e39dd5f29724019144384c7cb6e8f2
-
SSDEEP
3072:nN079yBw+ajAVFzwgVDaIJW9PF10B5ty89W1mJ5u2:NSySfErz/9JyP4ztyMWc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 30a1ffc3025ddb27f5cd65446b91a120_JaffaCakes118 unpack001/out.upx
Files
-
30a1ffc3025ddb27f5cd65446b91a120_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 152KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 356KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ