Behavioral task
behavioral1
Sample
ceea32d306d78ffd854dfddab642d9db_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ceea32d306d78ffd854dfddab642d9db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ceea32d306d78ffd854dfddab642d9db_JaffaCakes118
-
Size
9KB
-
MD5
ceea32d306d78ffd854dfddab642d9db
-
SHA1
f8372bbb2b6b4471a543613880327128bb9f1046
-
SHA256
2de33f02d07b1c241b1adb7977fb6175c849b413f1a566f34823da9c1e941f90
-
SHA512
0aad32751d4a4a589c74ff526b8f01e124a0fd1b2cde3f18422ebfd57a9c178e854e09179329d9c8ccd35769f64e21df6f35971b69a0f08e687abdbaa978892c
-
SSDEEP
192:2Ytpb+3RT+05cCtQ59AY34iP7h0BNLysF46Vmp2Gr3toB7na1:+3RT+wtI9AYIil0BN5Vmp2Gr36ba1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ceea32d306d78ffd854dfddab642d9db_JaffaCakes118 unpack001/out.upx
Files
-
ceea32d306d78ffd854dfddab642d9db_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ