Behavioral task
behavioral1
Sample
4d31de1af3dac57cbdc19b15ffcbbc57_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4d31de1af3dac57cbdc19b15ffcbbc57_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d31de1af3dac57cbdc19b15ffcbbc57_JaffaCakes118
-
Size
295KB
-
MD5
4d31de1af3dac57cbdc19b15ffcbbc57
-
SHA1
3a72e493f67442738b58ed89926133eca2f3e368
-
SHA256
18fac9d8ee8b9e41f8a8637f1ccacd43a4275e8000ccb05e3a58ceb952e2ab2b
-
SHA512
e7c8c8f3d0c750f2e7981c303ecce7c3cf59211111735dd2d9996ea35703803f653683e4b1e6eeae844d6fa74a9e97657c03cb17ec3a6ce856c5ddd32e217b17
-
SSDEEP
6144:OaOneMxMRhM14UookbNXHADE2IpBageaqwwBLrNeSDTTORu9yuTdIg:onVWTe9kb9ADwO6qrBLrNe8TTOUCg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 4d31de1af3dac57cbdc19b15ffcbbc57_JaffaCakes118 unpack001/out.upx
Files
-
4d31de1af3dac57cbdc19b15ffcbbc57_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 285KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 234KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ