Behavioral task
behavioral1
Sample
0075b200a57d7a7e7a5073602a72bb71_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0075b200a57d7a7e7a5073602a72bb71_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0075b200a57d7a7e7a5073602a72bb71_JaffaCakes118
-
Size
6KB
-
MD5
0075b200a57d7a7e7a5073602a72bb71
-
SHA1
f7b88717c39e953525cbb39ae614b7f3d2b7cf3c
-
SHA256
31acec2b775ff20a588c331b7d79500c3d4d07067b31a98622e7519f6a673359
-
SHA512
d3bdeb3df503294d8613971627944ab15a852781ecf645e9a381ee8c05b2964e939a9d43a9c1c671434c1b4c9549ea3ac65d3e77a1b52519ab88fc42ec350912
-
SSDEEP
96:kqiyerxCB0GFViRHablqMPFG0tez7LO+CSERi4cLthzVW8ev/h:+vwv86bla0tE7r4443h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0075b200a57d7a7e7a5073602a72bb71_JaffaCakes118
Files
-
0075b200a57d7a7e7a5073602a72bb71_JaffaCakes118.exe windows:1 windows x86 arch:x86
0fe9471fd9c8fbc84d199c00e88f052c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AdjustTokenGroups
kernel32
Beep
user32
BlockInput
gdi32
GetBkColor
ws2_32
htonl
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE