Behavioral task
behavioral1
Sample
574dcfa7bbb5f50d9ffe8e096644372b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
574dcfa7bbb5f50d9ffe8e096644372b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
574dcfa7bbb5f50d9ffe8e096644372b_JaffaCakes118
-
Size
25KB
-
MD5
574dcfa7bbb5f50d9ffe8e096644372b
-
SHA1
3dd3d6f928c7d7d2aaa31a2fb7a3809d2b359fd5
-
SHA256
eb157694eac458289eb37f4e544fa1ff5d518e3448e16f2f7ec27da62cfa3632
-
SHA512
6ba5b69ae9aa2ef85f58416887cc0073795d6a50843c4b282935548cab0f8d6906a53f291fec35ea5cf5a0262dd141c589de9d330975ab89d98a3afbbcfde9fd
-
SSDEEP
768:1Jm2sWQQQQQQQuXacFNrqAt/OslLEtEoDhEZLKu:BfQQQQQQQuqcFNOA2pEoDSZLp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 574dcfa7bbb5f50d9ffe8e096644372b_JaffaCakes118 unpack001/out.upx
Files
-
574dcfa7bbb5f50d9ffe8e096644372b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ