Behavioral task
behavioral1
Sample
0017e14dc61a95293a07e22ac2c4068c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0017e14dc61a95293a07e22ac2c4068c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0017e14dc61a95293a07e22ac2c4068c_JaffaCakes118
-
Size
5KB
-
MD5
0017e14dc61a95293a07e22ac2c4068c
-
SHA1
eba18d3baad55a4fb90b64bdec84a0f685ce34e1
-
SHA256
c06cb8f767d5a3ac762ef3ff0b578e792145785eaaa10dbeb1bcc925f36e06f2
-
SHA512
f114a0fd1087be34a87e97150ee30d81bd44f4ddfa140a5c979f0f6a2992d4f567afec9745cec9c86a807eb19df263b2c9514c4a5a5d88bc318162d5e980fa7f
-
SSDEEP
96:DnQikM92TgH/ZpeH5BsSRvv1z0WDwcz6vQURo92GBSXpw7c:1skZ8Dsovv1w5cIoh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0017e14dc61a95293a07e22ac2c4068c_JaffaCakes118
Files
-
0017e14dc61a95293a07e22ac2c4068c_JaffaCakes118.exe windows:4 windows x86 arch:x86
53a1710dd1cacd59607a235aa9f58a5f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DdeQueryConvInfo
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE