Behavioral task
behavioral1
Sample
217c0e2e24efa8adf943b06a52d90ff5_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
217c0e2e24efa8adf943b06a52d90ff5_JaffaCakes118
-
Size
52KB
-
MD5
217c0e2e24efa8adf943b06a52d90ff5
-
SHA1
fa72574559fa74a466e3d9383b815851f17cd938
-
SHA256
482cc820b3e990f47de336b0f0a439de425d6b4ad91a65afce63e667199b9388
-
SHA512
7d7abf1942ed91b6818503509a7002ad8f50ade65abec15ac4b4106ef5e826b0605a235647853d007639311230cddd7635d12bda94069e7da4be13039e7792a7
-
SSDEEP
1536:j8CGOtGKLqvwt9RfKjfI//jiSqi7o02486lmy:j8otGAqvw9BoI+Sqi7o0D3my
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 217c0e2e24efa8adf943b06a52d90ff5_JaffaCakes118
Files
-
217c0e2e24efa8adf943b06a52d90ff5_JaffaCakes118.exe windows:4 windows x86 arch:x86
91834a0af34517a83b13f67eb7c438ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
MkParseDisplayNameEx
FindMediaType
WriteHitLogging
CreateURLMoniker
kernel32
CreateNamedPipeW
DisconnectNamedPipe
ExpandEnvironmentStringsW
EnumDateFormatsExW
ExpandEnvironmentStringsW
FindNextFileW
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE