Behavioral task
behavioral1
Sample
2a303d336c758803e149f671ffbce315_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a303d336c758803e149f671ffbce315_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a303d336c758803e149f671ffbce315_JaffaCakes118
-
Size
93KB
-
MD5
2a303d336c758803e149f671ffbce315
-
SHA1
55ed5d3f82c911ba6bb50c1478f0e947d037e1ca
-
SHA256
5e0ea5db904168ef1b7c0f35ba9c62d6b7f8298e650ffeeacecb51bc86fe2a51
-
SHA512
29af7e9a7f637b3affd2c2ebe1ed79a3436d0b169db13854242ced2b5c887bf47634b078090e5715b59de44940c2b5f00b9b33ea2dc7c76a9d2ac27effaf2667
-
SSDEEP
1536:hWGfY/RXmbsIiKHhTPCn3YiZllFxCGry2gLYQvVuRTfyUlwhMlrNspUP30qHEzoq:fY/RXmb4KdijPOGryjLYdm1abXPEqkkq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2a303d336c758803e149f671ffbce315_JaffaCakes118 unpack001/out.upx
Files
-
2a303d336c758803e149f671ffbce315_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.da102 Size: 512KB - Virtual size: 516KB
IMAGE_SCN_MEM_READ
.da252 Size: 512KB - Virtual size: 516KB
IMAGE_SCN_MEM_READ
.da216 Size: 512KB - Virtual size: 516KB
IMAGE_SCN_MEM_READ
.da061 Size: 512KB - Virtual size: 516KB
IMAGE_SCN_MEM_READ
.da172 Size: 512KB - Virtual size: 516KB
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wiki Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ