Behavioral task
behavioral1
Sample
f3eb6a01c7802c2fabc9c9dee8e2fbcd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3eb6a01c7802c2fabc9c9dee8e2fbcd_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3eb6a01c7802c2fabc9c9dee8e2fbcd_JaffaCakes118
-
Size
17KB
-
MD5
f3eb6a01c7802c2fabc9c9dee8e2fbcd
-
SHA1
e88c6b7083992d1470f8322f648058ca9ee89f8a
-
SHA256
3480d22f1d4140dc9732f61225445c40072f91b38a4e11ba9fcc84dff57a63ec
-
SHA512
8df26169a3a109b65585c8460bd66ab4a27308bb3a1fed3c0ebffbce4ffa73510b24f3dd193e7d352a7f07c494712497172e6c877d52e96a1639938aa7c21929
-
SSDEEP
384:VIyufby9VEP6suKLDc7TpwnitJBv62odyJLa1ZVi3qv7E9S:hufb8VEyxucCC362o0JO1ZI3qv7E9S
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3eb6a01c7802c2fabc9c9dee8e2fbcd_JaffaCakes118
Files
-
f3eb6a01c7802c2fabc9c9dee8e2fbcd_JaffaCakes118.exe windows:4 windows x86 arch:x86
dbfd43624c2805a6616c58e5e063c751
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DdeDisconnect
comctl32
ImageList_Add
gdi32
EndPath
advapi32
AccessCheck
msvcrt
printf
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE