Behavioral task
behavioral1
Sample
451ef3a7262dd881314b3a4f6585563a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
451ef3a7262dd881314b3a4f6585563a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
451ef3a7262dd881314b3a4f6585563a_JaffaCakes118
-
Size
1.1MB
-
MD5
451ef3a7262dd881314b3a4f6585563a
-
SHA1
f642c5feb799e288d5180dbcef3dd00f6002a7f8
-
SHA256
4537aad98ba956e1faa25c6c1fb6fcccc7fafb51ab01fb43cbbed792a45d98dd
-
SHA512
59a50c2a5aab338537fa19c9d37ff2f35c8390d78c465e8fb6032a37d6f5ee47f423411d106e43f6071b74cfc1ee3480cb04a9f673699e1276c82f2e469fd318
-
SSDEEP
24576:Sk+kJoew5k/sDEDSqTF0eZX4wDTL8b2Uc:SdkWeX/s4SCtZX4Mm2F
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 451ef3a7262dd881314b3a4f6585563a_JaffaCakes118 unpack001/out.upx
Files
-
451ef3a7262dd881314b3a4f6585563a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ