Behavioral task
behavioral1
Sample
9fe3eaa95238eca4d9c75259806cf886_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
9fe3eaa95238eca4d9c75259806cf886_JaffaCakes118
-
Size
87KB
-
MD5
9fe3eaa95238eca4d9c75259806cf886
-
SHA1
d9ee42dc1338d049fc29977b08777a68370adbca
-
SHA256
e24e27461e4739d07f962eb596c24499f1d448e2b9195bac9a765d3355a1d58e
-
SHA512
c12d2ea5c8fee8c532957e4d02f58f00da3309001cc147bf797424deacd355314d0d38ef4e3e5c62a35d759d2a4154aea51e0af0b1f97f5ca310db928e8b03cf
-
SSDEEP
1536:0r4KFQIa3ZLh0tJgXcGSwF1KsWa1ca/0aN1y4lJfKTq4UCz049jX:fKkZeqblWycaLi4lB6UC5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fe3eaa95238eca4d9c75259806cf886_JaffaCakes118
Files
-
9fe3eaa95238eca4d9c75259806cf886_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE