Behavioral task
behavioral1
Sample
a2439360f72450e35f7930c726459897_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a2439360f72450e35f7930c726459897_JaffaCakes118
-
Size
53KB
-
MD5
a2439360f72450e35f7930c726459897
-
SHA1
5d70a33af8eb5216d17259b372d8940dfebf12e7
-
SHA256
5716079ae3c07c9cb882fe757bb31c2bb0d0bb74a7edd2d71cf960cc2c6dca75
-
SHA512
a7328023aa28ef02f651cb46c02996deb6495fcca6a8ec8331eafc682bd507a187a9eeddfc488d5b75d9f2b3e7d26b722c6daf461ca5c82644c1051b54ec7ff3
-
SSDEEP
1536:0VTpKykuwu7ZHUWsBQxCIZ1gcpXgd+QHqOXX5+fpGL:0fqu71TG3Rd+QKFwL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2439360f72450e35f7930c726459897_JaffaCakes118
Files
-
a2439360f72450e35f7930c726459897_JaffaCakes118.exe windows:4 windows x86 arch:x86
1ecbd6ae2f1dcabbf66dc128bf44609a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateNamedPipeW
DisconnectNamedPipe
ExpandEnvironmentStringsW
EnumDateFormatsExW
ExpandEnvironmentStringsW
FindNextFileW
urlmon
MkParseDisplayNameEx
FindMediaType
WriteHitLogging
CreateURLMoniker
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE