Behavioral task
behavioral1
Sample
47309759b01d2434c987e0c31f17b410_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47309759b01d2434c987e0c31f17b410_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47309759b01d2434c987e0c31f17b410_JaffaCakes118
-
Size
7KB
-
MD5
47309759b01d2434c987e0c31f17b410
-
SHA1
d66b47aa52e37e9ce6d4fc663c409c1462c35069
-
SHA256
db9ff66be103f4a180b3c779645b18ddd498b760fee812ad3f86a04d020102cc
-
SHA512
3d0642f23df86ff0d363c49c27a834f1d7a824eaef049635291ba1ee535cffbf34c543bfaba3b3bc9c635bbd8a813e4fcbcba656a92af6e5e23e75d8c7b27dfa
-
SSDEEP
96:9z0Dsi0e8Q+/OxG6gyv4zrB39vVfUNSzNm02tJq4ULZUOMmxi3O/n:w0e8QW1x9tNUNuL2S4GZemxi3O/n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47309759b01d2434c987e0c31f17b410_JaffaCakes118
Files
-
47309759b01d2434c987e0c31f17b410_JaffaCakes118.exe windows:4 windows x86 arch:x86
b46ead522a346c3a0732882852f5cd15
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
user32
GetDlgItem
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE