Behavioral task
behavioral1
Sample
5f6a225d4204e94e80a51bebba30e0d1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f6a225d4204e94e80a51bebba30e0d1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f6a225d4204e94e80a51bebba30e0d1_JaffaCakes118
-
Size
183KB
-
MD5
5f6a225d4204e94e80a51bebba30e0d1
-
SHA1
2a7cc4cb3c7e43376d38840be7e3164b457977ab
-
SHA256
b2629e925a410b30a90a42fdcf423aab8379f4bb159fe1131d19eecba42fe160
-
SHA512
42ee9acd4ede52e563ebb73b51d9cd7a29a05b2f684615f17b497a79a7972d5ef0857d4ebc8a27091b9256378a8897714b1f540dd1bdc99ad0b80945115cc8fe
-
SSDEEP
3072:wxfyuNzJa4XZe/UOpW9dVwadYzKH/tLkg7kStN6pVwQoIsz9FeJVbXlcM1hbvw:wyuNz8oZCUcQwseq4gNz9QDVcM/0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f6a225d4204e94e80a51bebba30e0d1_JaffaCakes118
Files
-
5f6a225d4204e94e80a51bebba30e0d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
5bdea36b983e4865b988bb019d41b420
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord823
msvcrt
strcspn
kernel32
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess
user32
GetThreadDesktop
MessageBoxA
gdi32
DeleteDC
advapi32
RegOpenKeyA
shell32
ShellExecuteA
avicap32
capCreateCaptureWindowA
ws2_32
setsockopt
Sections
.text Size: - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ