Behavioral task
behavioral1
Sample
3096a3e8aa00bbc2ad8c26c6d86e3551_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3096a3e8aa00bbc2ad8c26c6d86e3551_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3096a3e8aa00bbc2ad8c26c6d86e3551_JaffaCakes118
-
Size
267KB
-
MD5
3096a3e8aa00bbc2ad8c26c6d86e3551
-
SHA1
a4bba58c54d0145d53c6b5e80ba6bae71a7f858c
-
SHA256
e65a7b34680e9f272a0803d0486aeea39f442094e9ba555d215881be26858a74
-
SHA512
0116f609223e16b9e49fb17443c7eba0d0970bea29417782de58b1ddb18aa522489dfe7ab994a1256c0d819183bdf3b13340eaab78f7bb9da9e0398aca849853
-
SSDEEP
6144:t1YPNExQmaI8zSU8/sZ2AUr7xEkayj6SdcGGSLM2iy:tePNEOnZesAnxEYj6Py
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 3096a3e8aa00bbc2ad8c26c6d86e3551_JaffaCakes118 unpack001/out.upx
Files
-
3096a3e8aa00bbc2ad8c26c6d86e3551_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 224KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ