Behavioral task
behavioral1
Sample
b15bea79488722008563979cfd230e71_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b15bea79488722008563979cfd230e71_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b15bea79488722008563979cfd230e71_JaffaCakes118
-
Size
10KB
-
MD5
b15bea79488722008563979cfd230e71
-
SHA1
b9c68b375855c11adae475ee726d1062867539a3
-
SHA256
2888dfb92bff493464cd22d6c422fde5c2a3d46fcc8c03eae8f5bc48103c672c
-
SHA512
776a40c7ee2178881d1cd263744e9a6eb2096672ef5a600d10e65026c5b7ab487e2b5bda2ccd97b22ca1560f351fd1b6ccf4ccd022554c87742af9d664839426
-
SSDEEP
192:Tvlm3NrkSjx2jhkAQMW0wUIDfhoZSHv2UC7BUwgfqGlG:Rmlk2x0ofiZSxQ3gCD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b15bea79488722008563979cfd230e71_JaffaCakes118 unpack001/out.upx
Files
-
b15bea79488722008563979cfd230e71_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ