Behavioral task
behavioral1
Sample
14b577eed523c4ec593af5f3961bc649_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
14b577eed523c4ec593af5f3961bc649_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
14b577eed523c4ec593af5f3961bc649_JaffaCakes118
-
Size
211KB
-
MD5
14b577eed523c4ec593af5f3961bc649
-
SHA1
8407221e3fcfd1360f37f2ec53ca14bbfa4a8a5e
-
SHA256
25237096f59f42edec819e61e61f15cd5b652181a095b1fbcd90b14821604082
-
SHA512
2bd026ea5ae23e3653c7ce7f3434abe43441fcbe74807dcf66eb7bfb2be99f19b976377ad4c5fdea8141daca6b2a078e15c72f57287bb5ca4d21ba8b1b3fea7d
-
SSDEEP
6144:yfJ+ZCjkGqN6bHEznsnFv8ygl8jQk0wYfyCg6R:8MYvtbHEbsjgl8j7tYfq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14b577eed523c4ec593af5f3961bc649_JaffaCakes118
Files
-
14b577eed523c4ec593af5f3961bc649_JaffaCakes118.exe windows:4 windows x86 arch:x86
a1ec8dce401eba16d45a4f1aa06ebd77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
VirtualProtect
ExitThread
CreateFileA
WriteFile
CloseHandle
msvcrt
memset
_CIacos
memcmp
_mbsnicmp
_mbsncmp
Sections
UPX0 Size: - Virtual size: 448KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE