Behavioral task
behavioral1
Sample
3bf80f12ae2239ea04df5d88ba77d273_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3bf80f12ae2239ea04df5d88ba77d273_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3bf80f12ae2239ea04df5d88ba77d273_JaffaCakes118
-
Size
135KB
-
MD5
3bf80f12ae2239ea04df5d88ba77d273
-
SHA1
4ac08c468985663b870b7592aab4188256ef394b
-
SHA256
e5ada7dc24cb9d7669b8faa744ea93eca99a2bf3e12f192e926ca2380fda7cb0
-
SHA512
82887d32ac79c70d6bfc9099d9b75e5b1712f42c0244e0955e93c8b47fe151d0c32e5232e0cc05e495d064accb998e7b9ad6a65738d6316d9695f4e8c4c9cbc7
-
SSDEEP
3072:+m3aPNpVCP/fv2h2SQWWwmuhC5JZ+ZV1AQSJC4nkNK3:+mUTAv2hDQWWwC5n+fTSJC4x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 3bf80f12ae2239ea04df5d88ba77d273_JaffaCakes118 unpack001/out.upx
Files
-
3bf80f12ae2239ea04df5d88ba77d273_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ