_MyFunc24@4
Behavioral task
behavioral1
Sample
76c226355f3c76eb5e0802ff3ddb1162_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
76c226355f3c76eb5e0802ff3ddb1162_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
76c226355f3c76eb5e0802ff3ddb1162_JaffaCakes118
-
Size
185KB
-
MD5
76c226355f3c76eb5e0802ff3ddb1162
-
SHA1
d150a81bc980aba50f7083beeefc0d2e682c4d13
-
SHA256
4ef7e8bc97037a2727a941c410cbc288a516d59552aef36cd0c6d5dc99a04aea
-
SHA512
87713a10396f642e4bf9ec4ea3d2763f46942deae55d4257c9982be4b9b24395fe7aef798bc4cf369d8d71f6149eb020846685ea35119e7253b62eaccbe4fc16
-
SSDEEP
3072:EUMVaT1qRUc+8L9ge6Dhc7R9zTLncQlQODBqPh6AWtPIR/VX3gcUq/wfn:EUt1qqcxLae5RZvcQ2OkPjR/BgcUq/wf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 76c226355f3c76eb5e0802ff3ddb1162_JaffaCakes118 unpack001/out.upx
Files
-
76c226355f3c76eb5e0802ff3ddb1162_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ