Behavioral task
behavioral1
Sample
05b8a4a87c92335f11f157f59155fe95_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
05b8a4a87c92335f11f157f59155fe95_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05b8a4a87c92335f11f157f59155fe95_JaffaCakes118
-
Size
370KB
-
MD5
05b8a4a87c92335f11f157f59155fe95
-
SHA1
c034e65e9ab366917fec9c2a4d6b594d611ba550
-
SHA256
2997d47d94fb70bf0364deb1e570df94ae71b8736952e1f2f4421cf71482c3f5
-
SHA512
024c2503b6b970fbd500104248a5419af464f04a1642bc5632e96c90c5fb8ffeef6ee3866246af053204af2c12db54dd08a6ad3dcc8a771137c73e52030b78ce
-
SSDEEP
6144:lvIgW9gaNaoK0zat8Gzw+NUxoK0zat8GzwzkIXfYnPY9lrhdMwPTZtkC:lQNiWK0qNLK0qjIQnAYwP7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 05b8a4a87c92335f11f157f59155fe95_JaffaCakes118 unpack001/out.upx
Files
-
05b8a4a87c92335f11f157f59155fe95_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 17.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE