Behavioral task
behavioral1
Sample
736f7314c9ad7eecc6d56d138bd7f38a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
736f7314c9ad7eecc6d56d138bd7f38a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
736f7314c9ad7eecc6d56d138bd7f38a_JaffaCakes118
-
Size
37KB
-
MD5
736f7314c9ad7eecc6d56d138bd7f38a
-
SHA1
eb764180a6e9a54431c122f355fe6c1e823901bf
-
SHA256
0c5a63b4a5ea5ffae9f9c5d2f26470b01fe3e60cd65dad08132eaf657c749a0f
-
SHA512
85d79b2331811287d4f168891a7abe3c59cdc77ae026f0efb9d630dfe9111284d65dcc7f1e74eacc1811ced3369b861f2a7b68f6f7256a3bed6c5b09e7d33275
-
SSDEEP
768:RfKSNpa2KhkN/vx2k/LaHICch7pVPCD0+sCynx9U/nQbvc:RfKSnakN/vwkWHpch1VPk5Oxe/nQbU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 736f7314c9ad7eecc6d56d138bd7f38a_JaffaCakes118 unpack001/out.upx
Files
-
736f7314c9ad7eecc6d56d138bd7f38a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsjeiw Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdoiue Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.skejw Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ