Behavioral task
behavioral1
Sample
335d2a3b199f8cb13b0199395d4cd620_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
335d2a3b199f8cb13b0199395d4cd620_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
335d2a3b199f8cb13b0199395d4cd620_JaffaCakes118
-
Size
203KB
-
MD5
335d2a3b199f8cb13b0199395d4cd620
-
SHA1
a834bd26a4c0ecf21d88419456cbaabe2a5dc7a5
-
SHA256
d85271295fa4bd71bfc572abb75ed8a68e62ef51a3ead917b037c49b95ff09d7
-
SHA512
4d581e73a3ec7838d476da87f2aa9c52f80586ed9f4f3ae532a3e4d923b0721fcb16c98ae6b7106e99c0c5d09efc71dcc8d4093b807a66c25532443dda827c43
-
SSDEEP
6144:Cbt5KYUdBUj8i5F6QaaGRvP4NMpsSoxpJIUfc9QGH:I5vUkQqRwPuSoIU+H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 335d2a3b199f8cb13b0199395d4cd620_JaffaCakes118 unpack001/out.upx
Files
-
335d2a3b199f8cb13b0199395d4cd620_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ