Behavioral task
behavioral1
Sample
463cc4efb4a733b6a110b40f5fd1d25f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
463cc4efb4a733b6a110b40f5fd1d25f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
463cc4efb4a733b6a110b40f5fd1d25f_JaffaCakes118
-
Size
181KB
-
MD5
463cc4efb4a733b6a110b40f5fd1d25f
-
SHA1
724dd1222cbca3f515d5099505b9e7d9d1b0a4a2
-
SHA256
2faeb2d1da1a81517a2d91026b8fec31bac898233d1f7e17bd1cbf95b88b0d6c
-
SHA512
70dac1138ba19bf8859eca5af69e1814c08eb7b53ce099626effbac91502e875064b800a099ade23a5b75a8f0dd5ed0e87e7b47ce6e69675419ac48bc684bd8a
-
SSDEEP
3072:BtvKKiUc3fRilUfhwvZwecd75tXYI6PC9xvKPQRyGC9uK4igNw0Pvrhefl4h1:rCKiPcChwvZw9fII6PC/vKPfuK4BNw03
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 463cc4efb4a733b6a110b40f5fd1d25f_JaffaCakes118 unpack001/out.upx
Files
-
463cc4efb4a733b6a110b40f5fd1d25f_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.arch Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 838B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ