Behavioral task
behavioral1
Sample
a23f4df4c11940ee42f6d9819e7824a4_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a23f4df4c11940ee42f6d9819e7824a4_JaffaCakes118
-
Size
53KB
-
MD5
a23f4df4c11940ee42f6d9819e7824a4
-
SHA1
d61561670228111ff7b2936c34e934e53d2a864d
-
SHA256
ca6c839300b53f48f300ff1ed1913adacb3f3a13bf24c87f6d66549e411f195a
-
SHA512
ff1a6c25cbf95f7d87f519367995f50d8dd1a016c4d626374c30de8126523af31212ba080936d227440f19963dcda8041154cf500e2239b5ba449ba5042c09f0
-
SSDEEP
1536:EmkEc1NyDPAH36m6CkG1f+a9OMkhNFooHTNkkITUio7JX:NZiKhCl1ma87hNFTTWkR5J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a23f4df4c11940ee42f6d9819e7824a4_JaffaCakes118
Files
-
a23f4df4c11940ee42f6d9819e7824a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
1ecbd6ae2f1dcabbf66dc128bf44609a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateNamedPipeW
DisconnectNamedPipe
ExpandEnvironmentStringsW
EnumDateFormatsExW
ExpandEnvironmentStringsW
FindNextFileW
urlmon
MkParseDisplayNameEx
FindMediaType
WriteHitLogging
CreateURLMoniker
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE