Behavioral task
behavioral1
Sample
46c62a253f9a603e4c8e35082ecfb265_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
46c62a253f9a603e4c8e35082ecfb265_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46c62a253f9a603e4c8e35082ecfb265_JaffaCakes118
-
Size
411KB
-
MD5
46c62a253f9a603e4c8e35082ecfb265
-
SHA1
951407dd815baac6c85d9e672fce0f89b52c895c
-
SHA256
93e9af40ac84c50baecd541233526f36a8f162647a0b075bf69c42f7ac69f2fe
-
SHA512
f58ecdce21185d83137a58f8c1c633629bc11c776dc6f734c64b78e67c5ecfec2be064b0cfe88aa0abb3d18365ae569841fc9971d17ca537301e14d1522ddc6c
-
SSDEEP
6144:f9wX/d71LNdwk44Q/FQbLPGP8JicFHwMlKy91pGi0EXs0okeuu1aI40:Vo5NdPjbLrF3lK4GirXs9keuu1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 46c62a253f9a603e4c8e35082ecfb265_JaffaCakes118 unpack001/out.upx
Files
-
46c62a253f9a603e4c8e35082ecfb265_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 405KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 152KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ