Behavioral task
behavioral1
Sample
42a6ef3f0029d54f0fa59cc747a5377a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
42a6ef3f0029d54f0fa59cc747a5377a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
42a6ef3f0029d54f0fa59cc747a5377a_JaffaCakes118
-
Size
1.6MB
-
MD5
42a6ef3f0029d54f0fa59cc747a5377a
-
SHA1
61dd957207105c9302a4a853c9aab373b095e970
-
SHA256
06b4e99e116a55d2abc1ce959f6987c3d44e5c7ac13fc621a9e053667bcf405a
-
SHA512
551c709d64cd7ae82707e4b016e00690ebcb5936635ac7d29f3bc6c3e49d4cf0f0461012d75a9e5ad723dd97d6eb068d33bcd9a421ab874282ab3f88b685782d
-
SSDEEP
49152:/eD2wC0nz8k3nZYNSlTjN9l6A4tiDODPvvaicIJwsj6F:mD2cn4CvlTje8Ddgwqo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 42a6ef3f0029d54f0fa59cc747a5377a_JaffaCakes118 unpack001/out.upx
Files
-
42a6ef3f0029d54f0fa59cc747a5377a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ