Behavioral task
behavioral1
Sample
40ae992104f60dbd9f381bd2a9cf718e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40ae992104f60dbd9f381bd2a9cf718e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
40ae992104f60dbd9f381bd2a9cf718e_JaffaCakes118
-
Size
410KB
-
MD5
40ae992104f60dbd9f381bd2a9cf718e
-
SHA1
52afa35020197594c6e64b776876265fdf325ad5
-
SHA256
8ef5c0637037358e42babd15f7c52004c194c76940ca5a84f8bf3c1eb589ce2a
-
SHA512
a03cb243623c5b7b3b38b0987a7c82fb3bcb2be6bcbefe8fc97d363b86861daa3c3f89a10331aea8e9be72d447c126fef95c8ccfa9b853396ae58638c808ac98
-
SSDEEP
12288:SnNhuBoY8SorxgmA+nlvVll8MVdHLiAy07FR4U:SPatCg7EPvVxiAPwU
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 40ae992104f60dbd9f381bd2a9cf718e_JaffaCakes118 unpack001/out.upx
Files
-
40ae992104f60dbd9f381bd2a9cf718e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 352KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ