Behavioral task
behavioral1
Sample
75c113bb8b81eb3ff371227a66191fa4_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
75c113bb8b81eb3ff371227a66191fa4_JaffaCakes118
-
Size
88KB
-
MD5
75c113bb8b81eb3ff371227a66191fa4
-
SHA1
05efcfbd3c4bbcaf79752cb3cfba533f51e86c59
-
SHA256
b56fbf339db17a05e8adeb91c92714061c4d9280c4f4ec0588c3f6195b2ac4fb
-
SHA512
7324765e9f35a331449dbc2fca4a3961cdcd03f7cb07c939c5fff2418eb75a3d09957bffc58a37656ef408c20503836ad5078a68958131312e26b92332420f08
-
SSDEEP
1536:jeoROCpFn1sv7oMy/TeOAU9P4ZvdlBhby/nP0+9AF1v00nMS/5JN5fk+lyX46G4z:GCtsviT9UVlBhGk+9cy0MShJNafXg4z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75c113bb8b81eb3ff371227a66191fa4_JaffaCakes118
Files
-
75c113bb8b81eb3ff371227a66191fa4_JaffaCakes118.exe windows:4 windows x86 arch:x86
05c7df6d575c13faf78878f9450f3b20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
ExitProcess
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX3 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX4 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 256B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE