Behavioral task
behavioral1
Sample
a7dc6d032d4bd7ac1348198047affc1c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a7dc6d032d4bd7ac1348198047affc1c_JaffaCakes118
-
Size
39KB
-
MD5
a7dc6d032d4bd7ac1348198047affc1c
-
SHA1
8096a09c2e0d12454c351755b4027e7dd18473aa
-
SHA256
9c129a4d61f0978d3b9485f9016a1505b80f465332c36adf979643ce98605154
-
SHA512
21ebaffd1488b114a3f8fec71df8009cf68ace542fe924e496a9940685db2afc96bc6f431f79d94bc3c039b47a69f8a0ab3aa0af3b95179d13476c64b149a34a
-
SSDEEP
768:sHo2En4Suag9Do+qdMXukOh4yxXjYIAvIcs/Rbw:sITud5/qdMV832IAXsi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7dc6d032d4bd7ac1348198047affc1c_JaffaCakes118
Files
-
a7dc6d032d4bd7ac1348198047affc1c_JaffaCakes118.exe windows:4 windows x86 arch:x86
4b23b38cba768a96c68b0663113ae389
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
ExitThread
GetLastError
GetPrivateProfileStringA
GetStartupInfoA
GetSystemTime
GetTimeFormatA
GetVersion
InitializeCriticalSection
RaiseException
RtlUnwind
SetCurrentDirectoryA
SetEndOfFile
SetLastError
TlsSetValue
VirtualAlloc
lstrcatA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
user32
ActivateKeyboardLayout
BeginPaint
ChangeMenuA
CharToOemBuffA
CopyRect
CreatePopupMenu
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxParamA
DrawIcon
DrawMenuBar
EnableWindow
EndDialog
EndMenu
GetDlgItem
GetFocus
IsCharLowerA
IsCharUpperA
LoadAcceleratorsW
SetCursor
Sections
UPX0 Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.protect Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE