Behavioral task
behavioral1
Sample
4afb7ec70432e8247bd8a901f3af5b60_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4afb7ec70432e8247bd8a901f3af5b60_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4afb7ec70432e8247bd8a901f3af5b60_JaffaCakes118
-
Size
358KB
-
MD5
4afb7ec70432e8247bd8a901f3af5b60
-
SHA1
4adf69257c19f28869a936d89244254e1aa7cb7f
-
SHA256
165fb6612c7f377ddbf27d71646f1b9525dbce9600dfe342ac1fcb96438d85ae
-
SHA512
54d523eea088733d95226153abfcba18087c73502335657e9dec3a846a9f8701633eb6953ed61b1cef05f13c283df4aea3a314560d9d1ecbe1b2fc99a77f26a0
-
SSDEEP
6144:uwM+2N+LrxJcWAfR+LvHzSMx87ZlOQuIHuIFpJN47EQygOHovu9NAm:uwb2UdJcWkR6zN8Ol7mLN4AgOHovUy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 4afb7ec70432e8247bd8a901f3af5b60_JaffaCakes118 unpack001/out.upx
Files
-
4afb7ec70432e8247bd8a901f3af5b60_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 356KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 325KB - Virtual size: 327KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE