Behavioral task
behavioral1
Sample
main.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
main.exe
Resource
win10v2004-20240709-en
General
-
Target
5ae674b85f7d05ad8c0dc2c5cdb1d0ad_JaffaCakes118
-
Size
5KB
-
MD5
5ae674b85f7d05ad8c0dc2c5cdb1d0ad
-
SHA1
8f8e1c8264935d0d0fada0c4d21e35299ad06fcf
-
SHA256
8bcb7d9c30bb5068c3e68f9ae6d52a029156a7e785ea84132b8f7a0fa52440e2
-
SHA512
acada4bf3aa5b697dfdebcc2a4ae015bd4c0c91df18a8fbd2b82296df2e67d3368cd8743181528a6f6dc4a005c7e9a19e4f6c078d2421f70fb02376d4b27630e
-
SSDEEP
96:AX7xwtV1uv6dwhwyPUJSMA7s5mFpLKuIZ9iBqyFZN4qbVsSHPs7wDedQ1R:ArGtruSmSyYAIcqiBVlVaiF
Malware Config
Signatures
-
resource yara_rule static1/unpack001/main.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/main.exe unpack002/out.upx
Files
-
5ae674b85f7d05ad8c0dc2c5cdb1d0ad_JaffaCakes118.cab
-
main.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 458B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ