Behavioral task
behavioral1
Sample
75308c6ec5b6db30db6855df0b16778e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
75308c6ec5b6db30db6855df0b16778e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75308c6ec5b6db30db6855df0b16778e_JaffaCakes118
-
Size
174KB
-
MD5
75308c6ec5b6db30db6855df0b16778e
-
SHA1
caa70e6e77629b31dac4c0fa0f5712c344d0889a
-
SHA256
192f932832506f78294367a882c624cbc30b9abbbf05c9d2cef6707508e49bbd
-
SHA512
a7f9c031b47a6bc28145b0735a7b0582a815e3c9ef4ab0d0ee95a31c51b4705d4bbb316d9c8f53ab45646bf480bc59a8b2f5e72533b2d43bc1ae8ccb24981452
-
SSDEEP
3072:zp1unAuTOYs4uSuNqfc0eoveKIOuWRQx02ADWDxektTPw5R8GtPR2nvMtVovqiUL:zCnKFz4c0eixuW+xUDWDrzA2Y5X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 75308c6ec5b6db30db6855df0b16778e_JaffaCakes118 unpack001/out.upx
Files
-
75308c6ec5b6db30db6855df0b16778e_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 173KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 435B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 229KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ