Behavioral task
behavioral1
Sample
076f0c14816c9c46513dc65c2be97ec7_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
076f0c14816c9c46513dc65c2be97ec7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
076f0c14816c9c46513dc65c2be97ec7_JaffaCakes118
-
Size
53KB
-
MD5
076f0c14816c9c46513dc65c2be97ec7
-
SHA1
d5d853f24619bfdf2ca2b2e8ad9fb42d50af6b3c
-
SHA256
5e3df6e6990cf13c1302640dedad02cbbc322a2a50d02e184566a00cac215938
-
SHA512
d9ffc34d792608334bc291b76f077d434ef7d60acc4f41c4e7153ac148168d4a1dff9de8bbc2f6801f974276cb6d8665e2ef2d1207076735a6778dfc1b9b5d3c
-
SSDEEP
1536:zJFbTrZh3j8MO6B8WtzkN2lvuMRgSsxMQ+U:zJFbPf3jdOOBzsYuMVsxMQ+U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 076f0c14816c9c46513dc65c2be97ec7_JaffaCakes118
Files
-
076f0c14816c9c46513dc65c2be97ec7_JaffaCakes118.exe windows:1 windows x86 arch:x86
313e98f022c349725e9dbd6d9390af06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
comdlg32
WantArrows
gdi32
GetCharWidth32A
user32
BeginDeferWindowPos
msvcrt
printf
Sections
UPX0 Size: - Virtual size: 524KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE