Behavioral task
behavioral1
Sample
5b14394c4dd8c82278a1a4c98a461579_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b14394c4dd8c82278a1a4c98a461579_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b14394c4dd8c82278a1a4c98a461579_JaffaCakes118
-
Size
15KB
-
MD5
5b14394c4dd8c82278a1a4c98a461579
-
SHA1
9aec662e9e3705111de6e9d337eb6d5cd3a9f699
-
SHA256
c86697d2e542f8fc3015171d59022450287bdc3e7f7dcb028934972e2eff6105
-
SHA512
d809e163d6d802e3415071046731c2c057c6116f43bfa4d7beddf442d32174af46b38f2899b88c74346bc22db30d22350bce880fc835e8a6e7d89c15e04ce8de
-
SSDEEP
384:5BrH7/6jQ3tUQQsIdu/anGOL2U3jX9zhVNIq46ZWhOA:Hrb/UQ3tUVsnojX9zh7Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 5b14394c4dd8c82278a1a4c98a461579_JaffaCakes118 unpack001/out.upx
Files
-
5b14394c4dd8c82278a1a4c98a461579_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ