Behavioral task
behavioral1
Sample
a5e1d7dbeb8457af2feeecdf695d952f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a5e1d7dbeb8457af2feeecdf695d952f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5e1d7dbeb8457af2feeecdf695d952f_JaffaCakes118
-
Size
23KB
-
MD5
a5e1d7dbeb8457af2feeecdf695d952f
-
SHA1
d92fbac2cc4bfb9d614d9d48860c0b62ffa96c1b
-
SHA256
00f7803bc8f3fcc4242daa789727b44f60ad88482a31f50c37a3f16d6f693444
-
SHA512
bf6eadd04c80873b097070776a43ca9564d5adcb27ad044ddd6163757de192abc931c861228716d72e40601e46d6fe63f48dfd774d1f0ce63b39d3517668fe30
-
SSDEEP
384:j+C1t6jzW/0Fqiz+qfc6AZpi3SlblsU33KLQmJMu31oZ6dCTAIaSOCaEQOP:iCKybizJXAzxl9KLaQ1okXxCaEN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource a5e1d7dbeb8457af2feeecdf695d952f_JaffaCakes118 unpack001/out.upx
Files
-
a5e1d7dbeb8457af2feeecdf695d952f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ