Behavioral task
behavioral1
Sample
de579c2d2744fc1572eaf713d498853e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de579c2d2744fc1572eaf713d498853e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de579c2d2744fc1572eaf713d498853e_JaffaCakes118
-
Size
13KB
-
MD5
de579c2d2744fc1572eaf713d498853e
-
SHA1
15aed17e6bc0b1daadd8a769fe9880b2140c29ee
-
SHA256
cacffe45364c82d290f1acba52f943dd9e9436f6b600ac94df0ceb08242351dc
-
SHA512
744ee1b005455717a23273e983036a0fad53fa5c51983b4ea7163ba15c950a89bfd76b5f621754d05e9c0e87007280f56959a3302471abd388937b4c9db4388f
-
SSDEEP
384:mEyPDYCdJPvNyb89G0g4RV0d5HRbBbCtHHni:LCBnXNI8bg4P07HLO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource de579c2d2744fc1572eaf713d498853e_JaffaCakes118 unpack001/out.upx
Files
-
de579c2d2744fc1572eaf713d498853e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ