Behavioral task
behavioral1
Sample
5dfec3f7510ed6cceaae3cf3377ed4cc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5dfec3f7510ed6cceaae3cf3377ed4cc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5dfec3f7510ed6cceaae3cf3377ed4cc_JaffaCakes118
-
Size
90KB
-
MD5
5dfec3f7510ed6cceaae3cf3377ed4cc
-
SHA1
7a57f783a5437186eac087a37223a2d0163528ba
-
SHA256
415bd6b05ad69ee635c9feda5207987d5aa4777cea4f37b47e0d12beca544864
-
SHA512
60ea72ac4b9286ff6b302a6b9116329fcce518d5e089b84d585fde7e6ab0616c7caa74e6fc1ec3ea500f75078268041a2e22f2b5e852a14dad996cd6b57c5a2a
-
SSDEEP
1536:vVXFx/BL11eZ8GuzR1vZLdGW2h2rCrF11ouZRJh+qOhcd03LrKHdsMKo:vVVx/5re6/zRlxc5QrkF11nZO3Lq3Ko
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 5dfec3f7510ed6cceaae3cf3377ed4cc_JaffaCakes118 unpack001/out.upx
Files
-
5dfec3f7510ed6cceaae3cf3377ed4cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 180KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE