Behavioral task
behavioral1
Sample
4ac8f869a647620f1b169f3544df6949_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4ac8f869a647620f1b169f3544df6949_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4ac8f869a647620f1b169f3544df6949_JaffaCakes118
-
Size
11KB
-
MD5
4ac8f869a647620f1b169f3544df6949
-
SHA1
fc171aa17edb0b624d381bd6d560221869e4c47d
-
SHA256
3142e033f84df79d284dab5fec1c19c2cf0f59a83e259e3de883fdba2124f5df
-
SHA512
4e76b1cee8ea839d594a91dcbd084a784b0cdc9c8c1ed1f6add322e3ec81f6848be2c137e873bd01dd3dbd10bb7c2cfae68c9bd623eb1eb980eaa9456f72b797
-
SSDEEP
192:/TAuyRcqreBpo2zmwvXN8Jmn05rS7At3irenR6ssgo8JV3Ehc:/TATRcqKmmH8E05rSstykR6ss0V3Ehc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 4ac8f869a647620f1b169f3544df6949_JaffaCakes118 unpack001/out.upx
Files
-
4ac8f869a647620f1b169f3544df6949_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ