Behavioral task
behavioral1
Sample
8853098ded7c817a403e49cb17225b68_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
8853098ded7c817a403e49cb17225b68_JaffaCakes118
-
Size
19KB
-
MD5
8853098ded7c817a403e49cb17225b68
-
SHA1
1f225da70a6c33bfb9e360f7001f0bc5c7e9c3dc
-
SHA256
8de90d846737871304f650bc9b0890915d5f9b270f42ada7a9c8241f65b373b9
-
SHA512
d3b88421cfd41e71ee4b8f47719abdc3ad2107fe500c8c2821a1bd7c0e38331800aa9a574d850fc3fc1b946fcadfa37903a04774b74c80faf7c1bde046984fbc
-
SSDEEP
384:FrBmFUil0yUoOIVdJQ0pm427nubfCgyYTEbc9JJRgk867vvxlLF:FrBQUMVOIVdXTOglTEavgX67DF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8853098ded7c817a403e49cb17225b68_JaffaCakes118
Files
-
8853098ded7c817a403e49cb17225b68_JaffaCakes118.exe windows:4 windows x86 arch:x86
fabba3cf328658bb6a9da2d4492a25fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
shell32
ShellExecuteA
mfc42
ord1575
msvcrt
exit
msvcp60
??1_Winit@std@@QAE@XZ
Sections
.UPXVER1 Size: 15KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPXVER2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE