Behavioral task
behavioral1
Sample
93a891fd446f4bdbe02badd6e69303ff_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
93a891fd446f4bdbe02badd6e69303ff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
93a891fd446f4bdbe02badd6e69303ff_JaffaCakes118
-
Size
12KB
-
MD5
93a891fd446f4bdbe02badd6e69303ff
-
SHA1
cb27cdde00f7b41a737e862f5c2271d046745bbd
-
SHA256
b01396ce89c653a67b2a6a31f1cba2730376b05a968bec6e2ca9cc3f90f84b29
-
SHA512
94aebfd060a15c98b9ae5bae0d89e2e5a072512cc3d9240ef52955f918ab82d2dd45c32e6732e1d38f1bfc29fde65484796ba62e185be809a90a1c7ecc2642a9
-
SSDEEP
384:cn1T4MnddswPiPpVEGLIJaN98aRu2QGsHHjS3gagAK+:mT4M04EVEnsNKsQm3N3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 93a891fd446f4bdbe02badd6e69303ff_JaffaCakes118 unpack001/out.upx
Files
-
93a891fd446f4bdbe02badd6e69303ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 308B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ