Behavioral task
behavioral1
Sample
60508cdb08388aef7044125a875adfcc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
60508cdb08388aef7044125a875adfcc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60508cdb08388aef7044125a875adfcc_JaffaCakes118
-
Size
84KB
-
MD5
60508cdb08388aef7044125a875adfcc
-
SHA1
1f76199662215571d423e4537bd7f2ec27f2db47
-
SHA256
c240bf455ba06f28b606acf23b34ce55735cacc9a09e8bfcb14ce2d9d319725e
-
SHA512
204d66e5c2460b0b9ebe8fe0e3cc42244ada4ca1aad18f4f95ee2170fe1f3d6e2663fc039b0d3e5f29986c5e03d22118681c8b3733cc5b7e4d727089a8a8b154
-
SSDEEP
1536:kLx3mTO8gnQjdRSJ6UfIAV8Ok1ocW+HQ4PCnTGWDPThAAQ42oviG:kFmTFVnVUgjOkW+HfPSDPdAt4gG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 60508cdb08388aef7044125a875adfcc_JaffaCakes118 unpack001/out.upx
Files
-
60508cdb08388aef7044125a875adfcc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ