Behavioral task
behavioral1
Sample
a01f06f36e4be328ea5b9939afbdb43b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a01f06f36e4be328ea5b9939afbdb43b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a01f06f36e4be328ea5b9939afbdb43b_JaffaCakes118
-
Size
159KB
-
MD5
a01f06f36e4be328ea5b9939afbdb43b
-
SHA1
801a6b7ba8b885e24ad8e924ef3ffafca69e2efb
-
SHA256
723de228777235e5aba067d261e1eae26b5b08b5acd785814088d2dfef4b2964
-
SHA512
fb5ed445ea0f25022ee8a73e0dcdf68da5c606402a5ec83c9bf904ed38e635499114b787285cc0d516533f5ac59fcf1be7d350e40610a70fdb3d2ff56058ef5e
-
SSDEEP
3072:eZty12jmThk8KWg+GV7caWDsFpcST34GIKtG7F7uSL5Nbe40VwWAA80kXKj:Gy1+mThk/vtWibToGIUGh7FL5Y4680kW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource a01f06f36e4be328ea5b9939afbdb43b_JaffaCakes118 unpack001/out.upx
Files
-
a01f06f36e4be328ea5b9939afbdb43b_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 331B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ