Behavioral task
behavioral1
Sample
61ab7aea0ac3095f5a3267bd0e3f6ffc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61ab7aea0ac3095f5a3267bd0e3f6ffc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61ab7aea0ac3095f5a3267bd0e3f6ffc_JaffaCakes118
-
Size
128KB
-
MD5
61ab7aea0ac3095f5a3267bd0e3f6ffc
-
SHA1
e916b5d85641c45aec200d3978137a2737a76221
-
SHA256
ba84bab49af252289619f4ec14d3eb168002eeaa4360e7094648a5c95f1e9c44
-
SHA512
ca5d197752c6355afb5aca8e6686af05fa15e870ec7bbf84c47400f44afc187b21da52744b64dfd5ca42ff4015c254434c4ba3aaed7642a183d074eb1a3375b8
-
SSDEEP
3072:MI4mwrkmGFQOkBAi8ZaHjMgZ8A38nCgPbGDoqtYy7:MI4FGFQOkaFSwu3cCgPa0qtY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 61ab7aea0ac3095f5a3267bd0e3f6ffc_JaffaCakes118 unpack001/out.upx
Files
-
61ab7aea0ac3095f5a3267bd0e3f6ffc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 98KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ