Behavioral task
behavioral1
Sample
330df29517d5a4933c761f824968f8af_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
330df29517d5a4933c761f824968f8af_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
330df29517d5a4933c761f824968f8af_JaffaCakes118
-
Size
123KB
-
MD5
330df29517d5a4933c761f824968f8af
-
SHA1
04b8a68fa465d5f7f5042873f75ae3f7c4a9c508
-
SHA256
bc3fefd48029c13f8c1419e49eb95ee34e10bae1cc1360eefda3f52433962384
-
SHA512
2b2971a3c0cc9c38db10d21b78d288052410a6ca045ae12b3c72434c82e23589cba2483e3c62a1e493437ed8b37a5b5e3279fb9adecc260905d297dcf5794ac3
-
SSDEEP
3072:H/T4Jf+MpMx7Qq/B+iTqD2egkB1+Rt0b5pxyI8:HrkmtxV/vTqP6tuHxy7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 330df29517d5a4933c761f824968f8af_JaffaCakes118 unpack001/out.upx
Files
-
330df29517d5a4933c761f824968f8af_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 504KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE