Behavioral task
behavioral1
Sample
3bb2368846aaf6e6e8bf8d5cf031e55e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3bb2368846aaf6e6e8bf8d5cf031e55e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3bb2368846aaf6e6e8bf8d5cf031e55e_JaffaCakes118
-
Size
148KB
-
MD5
3bb2368846aaf6e6e8bf8d5cf031e55e
-
SHA1
252a0f0724444a04a94034c9d58b082aedef53c0
-
SHA256
b299c8de29fdcac30f8d6e05d8e41ad75e5ff774cb5c23927575eb387db2c0ce
-
SHA512
5f1422ccc1e01dd083b4659dcc51be9fac5b1d2a44cb350f86cbfa31c7f56d93fb27832868bb3dd645256aef61ee350527f31c0bc4f35de11c20303161ccea39
-
SSDEEP
3072:1lgNgZY5VCpW4DJgPEMRY6Ti8/F/+9dSDieqO4pJEfRP08zN:1lpY3CpW+JgPEv8/Ad8idGRsaN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 3bb2368846aaf6e6e8bf8d5cf031e55e_JaffaCakes118 unpack001/out.upx
Files
-
3bb2368846aaf6e6e8bf8d5cf031e55e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ