Behavioral task
behavioral1
Sample
610fb49e3ac216adaef7c5316cce4168_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
610fb49e3ac216adaef7c5316cce4168_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
610fb49e3ac216adaef7c5316cce4168_JaffaCakes118
-
Size
60KB
-
MD5
610fb49e3ac216adaef7c5316cce4168
-
SHA1
9f58b8b78479dd5535a8657828cb67eb63358d28
-
SHA256
78869863fad73d37151451dcfe1a0ddd4fa5e5160953f3adad6ff262c4a4e9e9
-
SHA512
8d0979943f9575d72f779b9025c24197b445c1120c91b6f8217a5ccb2dabb803e5d667f5ee7413a0ef4784093b171943bd78b3e1146509409b966ba03ae04cab
-
SSDEEP
768:zj6EhhlapyHtx0NWd6GzIwV4ySAi+Dc6YN97LPBM1A0hmMXzLNHFPLyOYHYIG285:zj6EhhlFHtB7+LAiKc6YzBNOma5FBjQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 610fb49e3ac216adaef7c5316cce4168_JaffaCakes118 unpack001/out.upx
Files
-
610fb49e3ac216adaef7c5316cce4168_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 808KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 773KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ