Behavioral task
behavioral1
Sample
ffa3b25cb3f2e952fbd4fd735732dcb2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ffa3b25cb3f2e952fbd4fd735732dcb2_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ffa3b25cb3f2e952fbd4fd735732dcb2_JaffaCakes118
-
Size
7KB
-
MD5
ffa3b25cb3f2e952fbd4fd735732dcb2
-
SHA1
c38d5637b58e7bc0038c769173476c770bacf853
-
SHA256
813de0cf0015b0b922b384c25d41efb1f2d4c757d8055e26cbce29289e2ffa31
-
SHA512
2491f62967200ef7891d77779225cfe3235f816ff00e6585ca705437e37df4b96a9d4a6a39d841df166de337311d11eae963d3c09f05310d52782ddc78cb6929
-
SSDEEP
192:hlxGJWwuZ8M55iDrybZ+Bunf2ZT7DvOlO7VAmwc+S7PU/:XxG3uT55iXybZkunf2ZTYm/+S7PU/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffa3b25cb3f2e952fbd4fd735732dcb2_JaffaCakes118
Files
-
ffa3b25cb3f2e952fbd4fd735732dcb2_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e44cfc71d5ba99dd6dedb0e2f43d741
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
FindResourceExA
user32
GetDlgItemInt
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE