Behavioral task
behavioral1
Sample
72b2c0395a1f3f6952fcdfd75732dec6_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
72b2c0395a1f3f6952fcdfd75732dec6_JaffaCakes118
-
Size
21KB
-
MD5
72b2c0395a1f3f6952fcdfd75732dec6
-
SHA1
970c6f48a40efb28439c1553fb20561c75b7b74a
-
SHA256
637d8fed96e6b5a8567797367b9aa85a252a0581b4e465ba2f51c2eb5cbe4cb5
-
SHA512
420562ed190bd02d7b210a1fbed906fdd085350af0f4c1cb8b38c76e45c34f1e40b175c8a087bf53b7132fc4466818dc5619330d682c6d6b6259c6bd0485051d
-
SSDEEP
48:6AzdiE1PUyiOe7wy8pjp5l1AM+Om0TagHr0zAl47y8V:thUee18l13HTagHr0zAlQyw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72b2c0395a1f3f6952fcdfd75732dec6_JaffaCakes118
Files
-
72b2c0395a1f3f6952fcdfd75732dec6_JaffaCakes118.exe windows:1 windows x86 arch:x86
20cd5e0230e4aaa363437b4b91700fd3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
SetFileAttributesA
DeleteFileA
crtdll
__GetMainArgs
exit
raise
signal
user32
MessageBoxA
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE