Behavioral task
behavioral1
Sample
5b30cdf25d25d27f4dc1f26694a2859c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5b30cdf25d25d27f4dc1f26694a2859c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b30cdf25d25d27f4dc1f26694a2859c_JaffaCakes118
-
Size
47KB
-
MD5
5b30cdf25d25d27f4dc1f26694a2859c
-
SHA1
e1bf4c4f9751f51aa4ae22f726e0ccd0ca4ccea0
-
SHA256
18a04fdb8efc880c0da034b944bb52fb60cca2a0554f1ad07e5168d73ba15f5f
-
SHA512
478c9785c776b2f59e0e834354e0b6e3929933e6105bcbca8b26b27acfad9792dbfa8d140fcbbc16554324bc4eec8c7bfafc0947cf499bd03cc800d17b1faa7c
-
SSDEEP
768:W7finxPQkdYzj4JZBKrtrbLg2Vzn8JUElQg8PZM4R5txNERrKKbgFG:W7fOh2gJZBk5Vzn8JUEHtoQRrKKbgFG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 5b30cdf25d25d27f4dc1f26694a2859c_JaffaCakes118 unpack001/out.upx
Files
-
5b30cdf25d25d27f4dc1f26694a2859c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ