Behavioral task
behavioral1
Sample
3e960d2dcd1ecf4fe16628d142309278_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e960d2dcd1ecf4fe16628d142309278_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e960d2dcd1ecf4fe16628d142309278_JaffaCakes118
-
Size
124KB
-
MD5
3e960d2dcd1ecf4fe16628d142309278
-
SHA1
a0a412c058a52a308aaf64aed3c969c33ab16967
-
SHA256
46f2671185ee6624e542b6be7e3a1c41464a42c19062eb50dc5fde827e51f416
-
SHA512
b8133da3e3c15ca63608299db023e3ea03eb5499b283ff4fc08fab2db383b9db6d5355027ae7b09274d71aa18aca3e1ced00eb3a18fddf3b09293daad1a628f9
-
SSDEEP
3072:Ex6okYU+2RKScY6gY+JR49HpcG4/5IwJK/IdXCN:U6LL6gVJR49JcG4IwJK/I9C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 3e960d2dcd1ecf4fe16628d142309278_JaffaCakes118 unpack001/out.upx
Files
-
3e960d2dcd1ecf4fe16628d142309278_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 630B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 603B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ