Behavioral task
behavioral1
Sample
46609f3fb76f85f912b2dd0b3d938155_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
46609f3fb76f85f912b2dd0b3d938155_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
46609f3fb76f85f912b2dd0b3d938155_JaffaCakes118
-
Size
357KB
-
MD5
46609f3fb76f85f912b2dd0b3d938155
-
SHA1
9bde088389a19f4059c9c8d35c5fd95bf9cb3883
-
SHA256
b1d2b7e6fb9130fc1f9f38e353064a09972e223d4132086734ed9b77b2212857
-
SHA512
ef5eb36b32aac9ba0f302b28689d5d436a7cbfadbc6d9e2940ca70fa870ca19bbe29c2fd3de208c4a9fcd04fe39fd8d108f6755116a61e39c405278c72ffa3a4
-
SSDEEP
6144:tb2XSU01LQ+twVED+W1ZEEtQEdaUk81DwjTBy/BQKj/KuDuVlflbLTi+py:tkH01LQ+tMWnnQEgUjEfwjDslfZi6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 46609f3fb76f85f912b2dd0b3d938155_JaffaCakes118 unpack001/out.upx
Files
-
46609f3fb76f85f912b2dd0b3d938155_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 327KB - Virtual size: 330KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE