Behavioral task
behavioral1
Sample
0952a0a3751c5adc4c94e8b7a0be8546_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0952a0a3751c5adc4c94e8b7a0be8546_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0952a0a3751c5adc4c94e8b7a0be8546_JaffaCakes118
-
Size
13KB
-
MD5
0952a0a3751c5adc4c94e8b7a0be8546
-
SHA1
4bd79409e3cd7b1eec80350d334cd8433d7937d1
-
SHA256
af065902ce4ca1ba7acfc3b0d08be7e8ae1edd73d7f99a17c1e5b504d7f76e94
-
SHA512
1da986f545a7f499dbf1b9de1b3aae2a933be96114909d7f0d1a98743e662f717c63ad424e184ff441de906898fdb8271815b931de88a53059b6736951e26f00
-
SSDEEP
192:G0WPLOEYJFGY+fzWfzjwLUoeJ/RBkn30G90xHRc7o3TccU+TY0F+UtYtXae4W0v:G0WKDfg5e5RA30GyxHRio3gcUsHB9W0v
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0952a0a3751c5adc4c94e8b7a0be8546_JaffaCakes118 unpack001/out.upx
Files
-
0952a0a3751c5adc4c94e8b7a0be8546_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ