Behavioral task
behavioral1
Sample
393cdd952fc45e36d060516270dd2a18_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
393cdd952fc45e36d060516270dd2a18_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
393cdd952fc45e36d060516270dd2a18_JaffaCakes118
-
Size
46KB
-
MD5
393cdd952fc45e36d060516270dd2a18
-
SHA1
343005dc3773f76784b2cd9823dba5d1d2b9d432
-
SHA256
58f0e48814c9a0c7461101ca6379c26d3657a624410aa807b52bca42ea6915ac
-
SHA512
7a3f0450eae6b8d8d12142bffc85e88e287f39b5ab76b3fcba5c920d417121fc5c6b631bdc6ea9985b6edb180ed4ad689759c6d1473dd3c1b737bde097f239ab
-
SSDEEP
768:rJvVtNBrd2mfHdMjOslUydN4OAiBoyd9pamC/lWQC8Oqu:rJvTbd2o9MjOGUkDDBRsmC5C8Oq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 393cdd952fc45e36d060516270dd2a18_JaffaCakes118 unpack001/out.upx
Files
-
393cdd952fc45e36d060516270dd2a18_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ