Behavioral task
behavioral1
Sample
48548f9b1b65bd55ba34e8e0d7787377_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48548f9b1b65bd55ba34e8e0d7787377_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48548f9b1b65bd55ba34e8e0d7787377_JaffaCakes118
-
Size
59KB
-
MD5
48548f9b1b65bd55ba34e8e0d7787377
-
SHA1
a8c55da25458cdf3a1ab70086dd428a2fb6baeec
-
SHA256
6707764561aa325d1f252402f081e5251f04b4b5be87eb165ff3cbda54610f74
-
SHA512
7eacb1f2720d154ccdd3f784d13d20dc3fc84e41460b236109ec9ab1da636ad9b3fecc7155d1c010947185c24af128677eeefdde8e1a1ceb2429f6f004326443
-
SSDEEP
1536:bnJRSVleOZfKiaTvt1J7cGRJBj6Ap7DwhT:bzc6CWeAp7e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 48548f9b1b65bd55ba34e8e0d7787377_JaffaCakes118 unpack001/out.upx
Files
-
48548f9b1b65bd55ba34e8e0d7787377_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.kewyo Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.axlgt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wqvwbj Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ