Behavioral task
behavioral1
Sample
40dc037eebf46f8e32598cfaea5a1b20_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40dc037eebf46f8e32598cfaea5a1b20_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40dc037eebf46f8e32598cfaea5a1b20_JaffaCakes118
-
Size
1.4MB
-
MD5
40dc037eebf46f8e32598cfaea5a1b20
-
SHA1
0e67268fac79d70d5c090d43c18a8e37f254bf67
-
SHA256
2f9cdb124ef66c94d9f0cdc5945f697e042483754a0b47da531550293dabbb5c
-
SHA512
6f370d54576c7a17ffa50447760dbbb0b325d6a1177241212f365cc28195fcfbe29f5d0a3f1c84c86b8c9277b6d80e57620bd2f15cf31f47e6ea12a94148c5a2
-
SSDEEP
24576:zLo28IEK3lBw8B62jZzy1en7eN9XEvAeJC2cj0gBhgqkHCe4TQnoyIehBu:zF8IfI2c1en7eNKvfQ1BhgwQnq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40dc037eebf46f8e32598cfaea5a1b20_JaffaCakes118
Files
-
40dc037eebf46f8e32598cfaea5a1b20_JaffaCakes118.exe windows:4 windows x86 arch:x86
6b5dfa26bc3e409fef21facab1bc2806
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess
user32
wsprintfA
MessageBoxA
Sections
.text Size: - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 340KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ