Behavioral task
behavioral1
Sample
483f473665bf3e41e787fd21a34538be_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
483f473665bf3e41e787fd21a34538be_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
483f473665bf3e41e787fd21a34538be_JaffaCakes118
-
Size
159KB
-
MD5
483f473665bf3e41e787fd21a34538be
-
SHA1
bfb803fb7bceb9716321433b81024090e1a37b3f
-
SHA256
dc65f54475f5dbb8795164b5d0ac54a1e4e1e6fe10964c85e3141933e89e992d
-
SHA512
19668e3567f8b7050927606f425f73e9ea25becba577922f72c30342b1839b515492483b2aa1324e421ecf102e1f03486519aa3e16a6090db4958d7dba15173b
-
SSDEEP
3072:FKaE3P3gVlW6Ya4BcFloa1MU752iED+HJt2AjbzXGCrk:luvYYz6Fv75dED+zGC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 483f473665bf3e41e787fd21a34538be_JaffaCakes118 unpack001/out.upx
Files
-
483f473665bf3e41e787fd21a34538be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ