Behavioral task
behavioral1
Sample
402cc6a0340a3fd5a93ae594ce2f50f3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
402cc6a0340a3fd5a93ae594ce2f50f3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
402cc6a0340a3fd5a93ae594ce2f50f3_JaffaCakes118
-
Size
7KB
-
MD5
402cc6a0340a3fd5a93ae594ce2f50f3
-
SHA1
7fcb0e5b258352a6760b96e48a1c44112a644a48
-
SHA256
6ccc633146b15fd50199231a926f859ca1879b0c9b40cb09627cc61c9ed933d3
-
SHA512
7ec2066cf24d9e093cc1981f03ba138c0247298d998a5a02501e87b293972f1b939ab490dc50550fec530d621ea99aa598658ec7b4117cba53c07c68081c08eb
-
SSDEEP
96:SOBrTar1l8A/xHA/N1/UaZuJqlVy1BVQ9HWRXue1xcHdnKUks:SeqH8t/n8PYVOB661a9n5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 402cc6a0340a3fd5a93ae594ce2f50f3_JaffaCakes118 unpack001/out.upx
Files
-
402cc6a0340a3fd5a93ae594ce2f50f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ