Behavioral task
behavioral1
Sample
5620f210025bfcb12b9924d11247c744_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5620f210025bfcb12b9924d11247c744_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5620f210025bfcb12b9924d11247c744_JaffaCakes118
-
Size
96KB
-
MD5
5620f210025bfcb12b9924d11247c744
-
SHA1
946f51f6de53caca266a50d087db2462ba16d47a
-
SHA256
07a56a38e801bb07cc3df2022451ebebc0c883fd66e164859168968409334739
-
SHA512
28fe18209fa45a1f99bfb155f55e9147bbc9be092849ca0bf087d9796efbc56bdc89b7dea71ef7a38aba0151967125544c6de11772ac56fa9c8f5e10a3b3a680
-
SSDEEP
3072:0tTr+/ZmLSepD00a19HYwLm/ieLZZ3DR5:7/mXanYwL4bH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 5620f210025bfcb12b9924d11247c744_JaffaCakes118 unpack001/out.upx
Files
-
5620f210025bfcb12b9924d11247c744_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 204KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE