Behavioral task
behavioral1
Sample
6616208bcaedf97e5d3f557c8fe15024_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6616208bcaedf97e5d3f557c8fe15024_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6616208bcaedf97e5d3f557c8fe15024_JaffaCakes118
-
Size
30KB
-
MD5
6616208bcaedf97e5d3f557c8fe15024
-
SHA1
6dfcd1d3155028cd44421999d82f7ce6e5c7ba10
-
SHA256
e58f9a3ed6381295cb389e7ab037cfa4ebb87868ffe28323c0f6d7a5077e5610
-
SHA512
5fe10311ef20c4968456fbd8d20b38037ef8afb993c4427439f298f2ceb430d61939444476b02729a32677f070081027de4e9dd710784b73933e4802bef16833
-
SSDEEP
768:dnkWu/KyXpqk59+2p3OZCh+5OKREZ/GqBHyt3hj:dns/KWUkG2wZ0+5OKREZ1ul
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 6616208bcaedf97e5d3f557c8fe15024_JaffaCakes118 unpack001/out.upx
Files
-
6616208bcaedf97e5d3f557c8fe15024_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VMP1 Size: 7KB - Virtual size: 7KB
IMAGE_SCN_MEM_READ
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ