Behavioral task
behavioral1
Sample
67534d3cc7cbe20ac20387b71dc3b27d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
67534d3cc7cbe20ac20387b71dc3b27d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67534d3cc7cbe20ac20387b71dc3b27d_JaffaCakes118
-
Size
197KB
-
MD5
67534d3cc7cbe20ac20387b71dc3b27d
-
SHA1
37d6da411a448cdd0c158ddbb45eb05118a7ebde
-
SHA256
0bf755d32a40485e20167d4f5aa6628f134c77b03d97854b1b327bb6848f2dc7
-
SHA512
3e836c5034520feeac9496d56ccfcafaeda291e1600f18cad23c10f7e2c42aa410941328d1f243a2a1a27ee48c1c165a1536a952fd558c1502e763563f2d9fe9
-
SSDEEP
3072:8EnOJTchPhG28coM1BypanFIbZLr/4zX95mA9XykYvLDlVehTimu8XYUFLSEkZri:8U3PhGq0Nrud5ykYv628IYNkZrapJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67534d3cc7cbe20ac20387b71dc3b27d_JaffaCakes118
Files
-
67534d3cc7cbe20ac20387b71dc3b27d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lv7xpz2i Size: - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9pmb9q5o Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ahk98.zo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ