_ll_callfunc@16
Behavioral task
behavioral1
Sample
67a0af4b796957e00c5812ef5bc79b81_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67a0af4b796957e00c5812ef5bc79b81_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67a0af4b796957e00c5812ef5bc79b81_JaffaCakes118
-
Size
47KB
-
MD5
67a0af4b796957e00c5812ef5bc79b81
-
SHA1
d1f971d5806c0085b6e5c2415a964e2f302e6681
-
SHA256
472ac85c9eb6a1b389a1ecb7339f7b05bbee70769959d0ed863b8751b6922b84
-
SHA512
932453fa2b352572931844b616688b7062cca2d7cdf6e038d172bf7617693116d34a8596ca29afdc0d41ac3333fcc29c2c721d83673025d9db8ec45d7c9c0a04
-
SSDEEP
768:OWpLtLK4+gdrGwo0znWMkcQMINabZrkZ9Js4BUNuHZsgGroSEAvqVj7Yaf56:OWNdBDdr1WMOQ1kZvfqovMEqewaf56
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 67a0af4b796957e00c5812ef5bc79b81_JaffaCakes118 unpack001/out.upx
Files
-
67a0af4b796957e00c5812ef5bc79b81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ