Behavioral task
behavioral1
Sample
37aad1279fa02c054a133fbc085ab15b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37aad1279fa02c054a133fbc085ab15b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37aad1279fa02c054a133fbc085ab15b_JaffaCakes118
-
Size
376KB
-
MD5
37aad1279fa02c054a133fbc085ab15b
-
SHA1
921e44bfd2194366b5f46cac1cd4e4681af7ac18
-
SHA256
432176ffacb9163fbb6112ae6bb5b09ebbad708ec841e21e18d7f8216e625697
-
SHA512
f646944c22ba14af1b8d44440883ee99f4a30605a2c9d078f093da8821767f004b5fdb198ef2b9e01c064c3c955fb52b8e11b8f4616a89d653651e71a0a099c8
-
SSDEEP
6144:N1lkqYAXbS/m354kCus+4SyxiCdUVG3VDHLL5qqDkfjeahUdyn3GQahn2nIngWMa:Fk2XbS/m35rCus+uoG3VbQYE9aN2In/J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 37aad1279fa02c054a133fbc085ab15b_JaffaCakes118 unpack001/out.upx
Files
-
37aad1279fa02c054a133fbc085ab15b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 372KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 329KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ