Behavioral task
behavioral1
Sample
3e67accbdfd076ae4815bebf8004b8de_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e67accbdfd076ae4815bebf8004b8de_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e67accbdfd076ae4815bebf8004b8de_JaffaCakes118
-
Size
31KB
-
MD5
3e67accbdfd076ae4815bebf8004b8de
-
SHA1
9d6513be72452adafe90078b637983000b95116f
-
SHA256
639b130d042ef73b52591054f277825aaa5dacb8d8ab068e020357641aeaa31b
-
SHA512
f643b4a1ecc73a16beaba8e9e3bf49d62c2c43d20d06729ea1ab412c490740333f8c5f09caccfe2afa989a01b6b90760a4618f19e8500cd9a98ff0bb3ad2cbe1
-
SSDEEP
768:aAdFPWu7MGLzKCx557ImRb1HgbowzdEtO4M9NMN:aATPgiHxrMmaowC84YNk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e67accbdfd076ae4815bebf8004b8de_JaffaCakes118
Files
-
3e67accbdfd076ae4815bebf8004b8de_JaffaCakes118.exe windows:5 windows x86 arch:x86
a1a671e7741d77ad1811887d1c498365
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
GetTickCount
GetModuleHandleA
VirtualProtect
Sections
.UPX0 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_MEM_READ