Behavioral task
behavioral1
Sample
ea6bbea37d9304b9802c8efefa8e17cb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ea6bbea37d9304b9802c8efefa8e17cb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea6bbea37d9304b9802c8efefa8e17cb_JaffaCakes118
-
Size
17KB
-
MD5
ea6bbea37d9304b9802c8efefa8e17cb
-
SHA1
58abcad4aca398a37c4b49e1d31b09fbca5e094f
-
SHA256
c5f661dc67c35d84bdbe2b939d4bfa7552bb990f0fef2b62c1cd47295235ed7e
-
SHA512
76373cd442418ca811d59f63c154a41b8ea408ffe46dcf4918469a0f7962d0e06972a66a7981f833cdc36b83178af2ff9053cef61f9f9bd1501fda7efdb9f9f2
-
SSDEEP
384:OUNy/URkgOyj+2v3W0UkOI0msRVzlNRTmMMy:OUBkdY+2OtpNVzpBMy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ea6bbea37d9304b9802c8efefa8e17cb_JaffaCakes118 unpack001/out.upx
Files
-
ea6bbea37d9304b9802c8efefa8e17cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ