Behavioral task
behavioral1
Sample
04c01ff926daa314f24457768011fd13_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
04c01ff926daa314f24457768011fd13_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
04c01ff926daa314f24457768011fd13_JaffaCakes118
-
Size
7KB
-
MD5
04c01ff926daa314f24457768011fd13
-
SHA1
d3bb4bc75bccb57a49335eb34b439eced596a1d3
-
SHA256
e0ac6dbfcfdba65ecd32cd1d8a6d0a1d99d754ee5f592e8f750d60aedc48bdec
-
SHA512
e7f141b105f4054aab61b1ecbf189dd93712ff006beb7d3ca407609ac6a69ceef8eb967e53dd604cec92b427d18a8e5275ec6a67a9bc56b2ef95922c2882ab03
-
SSDEEP
192:AGCO/Q2OX8TOPf3SuYkvmclge/0EJxeAlmyyNd/:JRIBMQDvNlgxE3Did/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04c01ff926daa314f24457768011fd13_JaffaCakes118
Files
-
04c01ff926daa314f24457768011fd13_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e44cfc71d5ba99dd6dedb0e2f43d741
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
FindResourceExA
user32
GetDlgItemInt
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE