Behavioral task
behavioral1
Sample
1b52b850308bf77f278da49140b2d11c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b52b850308bf77f278da49140b2d11c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b52b850308bf77f278da49140b2d11c_JaffaCakes118
-
Size
7KB
-
MD5
1b52b850308bf77f278da49140b2d11c
-
SHA1
d2052d3881a3e43c2ae9054f2a63760d6a1d8c1d
-
SHA256
72843266add9a23bfd950c4e127b15666ad47d4ed8d5b59ddc08f19d9d380002
-
SHA512
ab49e3001518428cba47110a9ba9e932f0298edff5827f160340c9a44607fc5c1db542d427bb050fd65f6d53e1eb876e8ae44b30b833be8ce47ced2d2bfe6913
-
SSDEEP
192:pfZRqAw67n4jMMb6QdW3OB+XcfvQos9OmieH:4kn45bnkdcps9RrH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b52b850308bf77f278da49140b2d11c_JaffaCakes118
Files
-
1b52b850308bf77f278da49140b2d11c_JaffaCakes118.exe windows:4 windows x86 arch:x86
8245b89b69c5ffce5d231a6851c92032
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ConnectNamedPipe
OpenWaitableTimerA
TlsGetValue
CreateVirtualBuffer
EnumSystemLocalesA
ExitVDM
gdi32
GetCharABCWidthsW
GetColorSpace
GetRegionData
ScaleViewportExtEx
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE