Behavioral task
behavioral1
Sample
f71fd939b765ea05e971bfa36ffa7a5f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f71fd939b765ea05e971bfa36ffa7a5f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f71fd939b765ea05e971bfa36ffa7a5f_JaffaCakes118
-
Size
18KB
-
MD5
f71fd939b765ea05e971bfa36ffa7a5f
-
SHA1
3c0ddecf2f31d4473a4ba844429ea1f083a158c6
-
SHA256
8d4bcb60a51b64af35d6193ef8a3489cfed9ce3a4c864262025761523029b011
-
SHA512
24f9d8a7947429f3557e9e54cb7f5f4485595c9d1d52425a674da7a8b9a05584cea5ac9227c9dd167d1fd778a796d8964cad1dc90bbc875184b8a8db67287609
-
SSDEEP
384:mQSwCL4w+hoAUO7G1EOyvIHKh/rHCSI2pFi9Jh9ipN1Li9xrFDV3t:fDh0OlSKZiS5q90p/ifhDV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f71fd939b765ea05e971bfa36ffa7a5f_JaffaCakes118 unpack001/out.upx
Files
-
f71fd939b765ea05e971bfa36ffa7a5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE