Behavioral task
behavioral1
Sample
0c038152454031de42b2980190d7ff94_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c038152454031de42b2980190d7ff94_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c038152454031de42b2980190d7ff94_JaffaCakes118
-
Size
23KB
-
MD5
0c038152454031de42b2980190d7ff94
-
SHA1
34b81101b766be831664fbf083f44860cbdf2d97
-
SHA256
e6c8e7f02eb03667a7dbf7af8b2ce1d99ccb18335bf239a3f6c5ccea41a2685e
-
SHA512
b3106893af773f590d916665a489057f61ed6c22f5a159685aee2453aa96da750992730732571433ba1834bb63f0352b49d7657c5d65e1d260d6b05b9b18cefb
-
SSDEEP
384:MHkdPdXCfgpnvFGN9Nm1aCgWPFAGFHVSILMEiTQjfh72/d14uXJfzbDpRjesdNAD:skd9rO96BdzXdiTQF72/dvflBesn23R9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0c038152454031de42b2980190d7ff94_JaffaCakes118 unpack001/out.upx
Files
-
0c038152454031de42b2980190d7ff94_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ