Behavioral task
behavioral1
Sample
5e3a665fd918edfee6b706836688cb17_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e3a665fd918edfee6b706836688cb17_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e3a665fd918edfee6b706836688cb17_JaffaCakes118
-
Size
72KB
-
MD5
5e3a665fd918edfee6b706836688cb17
-
SHA1
e023e599859fc4f35d40f8ec1ba15d81122a838b
-
SHA256
5a101698fc9a1a093d519155df8ed73799232bd2fa03b90363163d46e985751a
-
SHA512
a060105f755f97c82bddd572728deef67752e8dea160eb3863ce63e1d85079f02eda794e7985c58fdbdb957921b5292eaf498f4cdb8804d3c659f41b89a4ce2e
-
SSDEEP
1536:ygRGYv4OGfgrA3iiRHRbIE0VoVbqYN3xCzZQgljiVRovHpUI58FE6:ygWf7x0JWVrNha2VRovHpUn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 5e3a665fd918edfee6b706836688cb17_JaffaCakes118 unpack001/out.upx
Files
-
5e3a665fd918edfee6b706836688cb17_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ