Behavioral task
behavioral1
Sample
430804f3d4fdc60b96520b5e7bd97cc3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
430804f3d4fdc60b96520b5e7bd97cc3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
430804f3d4fdc60b96520b5e7bd97cc3_JaffaCakes118
-
Size
7KB
-
MD5
430804f3d4fdc60b96520b5e7bd97cc3
-
SHA1
55c29ae35b62e508380bb33a82957e1454721db5
-
SHA256
f328e5b60a8166a8dd1a07f38de12f5dcef922ca429fe794eab1f3bb17bc46c5
-
SHA512
b068eecf0870dac8031e726526038a007ad8d97f65e2b1a6e234a8a256c616208e95d6c059f9aaa2b7bc77422ad0f95f80e5f8900d4965d85447c516d1b48f65
-
SSDEEP
96:aroeI5G3Zh2lC5DTdK155JfeAAr5TIJVwsm0wEIOoCb:1xG3Zew3d6tGAAtUwv7E6Cb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 430804f3d4fdc60b96520b5e7bd97cc3_JaffaCakes118 unpack001/out.upx
Files
-
430804f3d4fdc60b96520b5e7bd97cc3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ