Behavioral task
behavioral1
Sample
73753b58638bfc09c169fc151cb353c6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
73753b58638bfc09c169fc151cb353c6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73753b58638bfc09c169fc151cb353c6_JaffaCakes118
-
Size
52KB
-
MD5
73753b58638bfc09c169fc151cb353c6
-
SHA1
ecd1f3f46763860c128d96f9e2d44a2ec7971d4d
-
SHA256
007fd2b3b8d29c108c830891d887210d8177ac94b4a9fbb5f6691ba593dccbf2
-
SHA512
ad941998073416446a2fe0b2741e16e621862b5fdfd40139e06072f75c279918252c9701ec2fc9a682dc7bff130925432e6d03ada2edf4e7392fa6304161b889
-
SSDEEP
1536:6X/4m2LxeFWTw09ompuoq7ZShpNnmPK7i6BO:i/ji3w09ompuoqNSRSKGj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73753b58638bfc09c169fc151cb353c6_JaffaCakes118
Files
-
73753b58638bfc09c169fc151cb353c6_JaffaCakes118.exe windows:1 windows x86 arch:x86
9817b955894da4725b466526a007931d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
user32
MessageBoxA
advapi32
RegCreateKeyExA
gdi32
StretchBlt
ws2_32
ntohl
Sections
UPX0 Size: - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE