Behavioral task
behavioral1
Sample
345e6232213f3abe4975c76b40611f2f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
345e6232213f3abe4975c76b40611f2f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
345e6232213f3abe4975c76b40611f2f_JaffaCakes118
-
Size
15KB
-
MD5
345e6232213f3abe4975c76b40611f2f
-
SHA1
5781b4259d366df2fc2e277e7d61c55e1fc8fc0b
-
SHA256
550854f869a9a9011e940d31547a1f0f6981ec6cb0cd9c7ed896c8493f1df23b
-
SHA512
dd803afa43a5ff1cd7b25b133058fa0bbf69ecfebb893e01af7fa291e76cfc444388a45563e00549e43d4824f16acef99889c382e4b12767e4a5d5d7cf22db90
-
SSDEEP
384:I6ZBnuaL5Alwcj4uNCMZ4u0VdQP6YI5BO70:I6ZtW4uNCMjyRB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 345e6232213f3abe4975c76b40611f2f_JaffaCakes118 unpack001/out.upx
Files
-
345e6232213f3abe4975c76b40611f2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ