Behavioral task
behavioral1
Sample
eb460b9d74fca59e559fcd127243ef5a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb460b9d74fca59e559fcd127243ef5a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb460b9d74fca59e559fcd127243ef5a_JaffaCakes118
-
Size
8KB
-
MD5
eb460b9d74fca59e559fcd127243ef5a
-
SHA1
e2e822a807f1d4a9948a891b8cf9820024872742
-
SHA256
96cf0ba44ac6992ea38480e66593bb6cd2ae0dccc0c9f6960b184f2384e094dc
-
SHA512
af9ec1d1bf1a5ffcfe590ce710ab0766ec80ec583f34ac76c06feb75b0e81a1604ddc55c0d53f49514f5fbbbea3991449d59b9a66351d6e90758edefccbd79a2
-
SSDEEP
192:nVwUKYqX1K9jWTg8SNgDjDynSe4iEh4THUMSgWMzzZ753Yyvxt:+UW1K5CgJNgvDoSHVMd9zz33n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb460b9d74fca59e559fcd127243ef5a_JaffaCakes118
Files
-
eb460b9d74fca59e559fcd127243ef5a_JaffaCakes118.exe windows:1 windows x86 arch:x86
0fe9471fd9c8fbc84d199c00e88f052c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AdjustTokenGroups
kernel32
Beep
user32
BlockInput
gdi32
GetBkColor
ws2_32
htonl
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE