Behavioral task
behavioral1
Sample
5bfc08348efe7ebf51d474a507357ed5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5bfc08348efe7ebf51d474a507357ed5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5bfc08348efe7ebf51d474a507357ed5_JaffaCakes118
-
Size
59KB
-
MD5
5bfc08348efe7ebf51d474a507357ed5
-
SHA1
aa47c809445f492b0f63cb2e3996ea77c78a5f2e
-
SHA256
81d2b7a2791f3a62b14a9b01ff8c459441e7c55d8e8f70054e5d158830e87d4d
-
SHA512
79c738fb5b0023b41b641a9ad77039f4997c2d93bf549b70775ece9d3f0f248be3889ee74007440a27ddddb671aacfb1dbcfb3ab30bef7643aac7a64588d3b29
-
SSDEEP
1536:4nJRSVleOZfKiaTvt1J7cGRJBj6Ap7DwhT:4zc6CWeAp7e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 5bfc08348efe7ebf51d474a507357ed5_JaffaCakes118 unpack001/out.upx
Files
-
5bfc08348efe7ebf51d474a507357ed5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.kewyo Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.axlgt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wqvwbj Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ