Behavioral task
behavioral1
Sample
60f9b0c193e0c46e7bf10435ae5c84b1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
60f9b0c193e0c46e7bf10435ae5c84b1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60f9b0c193e0c46e7bf10435ae5c84b1_JaffaCakes118
-
Size
491KB
-
MD5
60f9b0c193e0c46e7bf10435ae5c84b1
-
SHA1
8678d1db7a0f8b6dda5afc984933b42478a0d432
-
SHA256
ce68b2dcc4a9a323b539be49e2cabf673ef8093ccd10d98b5b15eb1f2c28ee87
-
SHA512
e7d4ab357026e9747fe8904de69fdcbf8dc377224f56f4c3f67d40716d74f19be1666f8d8277ebee328ab38ecda9b9e228a14b4cdfea7efed14b5fc0c4dd04ed
-
SSDEEP
6144:TUnnfVXp07USoudm2o22bkgjtVfN1p487fynENOjYHODRnIgK54IQzeeeL4/5:T4dW7LhZPTwXfNf30lOODRIgKKM4x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 60f9b0c193e0c46e7bf10435ae5c84b1_JaffaCakes118 unpack001/out.upx
Files
-
60f9b0c193e0c46e7bf10435ae5c84b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 812KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 708KB - Virtual size: 706KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ