Behavioral task
behavioral1
Sample
39db9e52fbcd50a9f8236f10530f2192_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
39db9e52fbcd50a9f8236f10530f2192_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39db9e52fbcd50a9f8236f10530f2192_JaffaCakes118
-
Size
11KB
-
MD5
39db9e52fbcd50a9f8236f10530f2192
-
SHA1
3bfce2f87c465ddac9ce7b5645f56c2d9e7b4066
-
SHA256
778c4488487f05483a158bc3115761cef8eb98598e26dc6fb817e865e05e573b
-
SHA512
f3bcee7f49b3cd85c3fbb04e86f9d89d1d6142bb2c67b3c06444bf7552380aea64e110d28992bc31dd9b9e39141d2ff876ec5702ec668d1242c2589669b3fe77
-
SSDEEP
192:02O9pdtPiOaB8zivFe2vNxzWtfGWNavcW7oKSG4oTiel1vKg31m:02idtPLM8CFn3zWteWNaEqFRhvlZNw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 39db9e52fbcd50a9f8236f10530f2192_JaffaCakes118 unpack001/out.upx
Files
-
39db9e52fbcd50a9f8236f10530f2192_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ