Behavioral task
behavioral1
Sample
07cad173a5b0fb2a9821dfdfa7cb1de7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07cad173a5b0fb2a9821dfdfa7cb1de7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07cad173a5b0fb2a9821dfdfa7cb1de7_JaffaCakes118
-
Size
40KB
-
MD5
07cad173a5b0fb2a9821dfdfa7cb1de7
-
SHA1
b1a8b36ecf90608d15d254a360313432384e55af
-
SHA256
6ecf325729c7f587c01806fda07b7244076b70548be1a3ba66c575f266c990f8
-
SHA512
132cf63409af599d86bb0a0128d2c534fbb48a950a73fce1055bec6a175c886f9f41fd3ed16b14f8b5f84f320b64730d50257b573dca9e7332e0709ff4ad5f72
-
SSDEEP
96:3jw5KA9tCNimECZuCOC7nK8Icx8AsQtwwBWQBSkzUfLUzSXb7zrIbvmH66G5kUgl:3TA7CcmE6lKuLvzVvmH6DkU7F70
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07cad173a5b0fb2a9821dfdfa7cb1de7_JaffaCakes118
Files
-
07cad173a5b0fb2a9821dfdfa7cb1de7_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d74d1339fb454e22b15869d6dee8816
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
cygwin
atexit
atoi
bzero
close
cygwin32_connect
cygwin32_inet_addr
cygwin32_shutdown
cygwin32_socket
dll_crt0__FP11per_process
exit
free
getpid
htons
malloc
perror
printf
read
realloc
signal
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE