Behavioral task
behavioral1
Sample
75d013e972c1bab0cf7294600bf48973_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
75d013e972c1bab0cf7294600bf48973_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
75d013e972c1bab0cf7294600bf48973_JaffaCakes118
-
Size
101KB
-
MD5
75d013e972c1bab0cf7294600bf48973
-
SHA1
d25fa694aadbc90d40cd5fc679a6ea3a25971205
-
SHA256
07113eecc364cf20e2c78d31ab33e9554cc7a475922a520551de797bfdb2ee7a
-
SHA512
a9fe2e97006587e44bdde234da14955440d6502c06fdc360023bba6e835095f9bb316e453cb440a8534f73986e2f4caf0963065bece1080e7d1a9a29d6803d78
-
SSDEEP
3072:U3X39RPO4ivjYK0kKVEfV31gOZkLrOP9hZ4Dnxm:aX3/PViksKm31gpr2hZ4Lx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 75d013e972c1bab0cf7294600bf48973_JaffaCakes118 unpack001/out.upx
Files
-
75d013e972c1bab0cf7294600bf48973_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 96KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ