Behavioral task
behavioral1
Sample
020ba42536af401d7273e38335083c53_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
020ba42536af401d7273e38335083c53_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
020ba42536af401d7273e38335083c53_JaffaCakes118
-
Size
387KB
-
MD5
020ba42536af401d7273e38335083c53
-
SHA1
e21f39fd8f18531f57354fcfcdef645a35d1c1b2
-
SHA256
d87c69f3368e844564252bf1d062bbf2158cac5badc73f447aa3ac169fab0e83
-
SHA512
d77f2e71195d8660031094395eb61ff2807a2ec94e58dfe6571fe9c074148ec6b0f46636c4594b57f870afc75d6803c7705649a91b763181369de1aa50e47e2a
-
SSDEEP
6144:XNBhZ5LlA5ScQxdoNj2Gzdsh6GVxp1aF86aJpFTek0EpFyN90pE:XnhZ85F5Nj2n6e1aF86hUy90
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 020ba42536af401d7273e38335083c53_JaffaCakes118 unpack001/out.upx
Files
-
020ba42536af401d7273e38335083c53_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 297KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 350KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ