Behavioral task
behavioral1
Sample
678319f8fe85bdc33750d0a9d9583ec0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
678319f8fe85bdc33750d0a9d9583ec0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
678319f8fe85bdc33750d0a9d9583ec0_JaffaCakes118
-
Size
555KB
-
MD5
678319f8fe85bdc33750d0a9d9583ec0
-
SHA1
1bc4f041408d0791ab9211377f652e407f85b294
-
SHA256
683b75aad914f3ad8bb3e672b87dfce400a5367d980ff32fade887bd220d04f5
-
SHA512
267acae2dcf2898cd853ec93c20200f0fd777e871b482a70c86abd838344210096c7e0d3d67c37a5c39af1098b55d61471b226dae46750bbc61666d79d3494c4
-
SSDEEP
12288:7n1w21FcADWHtIB7mwbCLZn484+CKPA4G9Tl69UnR:7O21FzatIpmwbCd4x+CI9Gp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 678319f8fe85bdc33750d0a9d9583ec0_JaffaCakes118 unpack001/out.upx
Files
-
678319f8fe85bdc33750d0a9d9583ec0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 760KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 540KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 809KB - Virtual size: 809KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ