Static task
static1
Behavioral task
behavioral1
Sample
antiyports.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
antiyports.exe
Resource
win10v2004-20240802-en
General
-
Target
899005e44c0ddcabc4d143648e082570_JaffaCakes118
-
Size
93KB
-
MD5
899005e44c0ddcabc4d143648e082570
-
SHA1
1f08c4fa4a429a4ca3fc52c62813106f25752f90
-
SHA256
444f1333cae751a78d08d43328f353c20409feb8e644f6d0d0fceed24142fdb7
-
SHA512
de4935332a41de6e08b2a880523f7365856ca268f0b2902c66f9f6c79dc7fa0af3fa274cc4d9f186f1b465a49ce59780e48cef38f6a3f1e79a8c43e9c8f9b3d5
-
SSDEEP
1536:y0Hxmxo9PaWaqjfHukRM25KL2Nz4IWbS0kWgC+lGYiQMr8lzC7d98YuDpKJBrQtz:9HxPyWVPFr5s2NL/qQS3R9aeBrQtO0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/antiyports.exe
Files
-
899005e44c0ddcabc4d143648e082570_JaffaCakes118.rar
-
antiyports.exe.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
.text Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE