Behavioral task
behavioral1
Sample
b148fa5f3049d63af5195811615fa3ad_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b148fa5f3049d63af5195811615fa3ad_JaffaCakes118
-
Size
7KB
-
MD5
b148fa5f3049d63af5195811615fa3ad
-
SHA1
be671d4a719fda388f3c3da383a885e884afab5b
-
SHA256
62f08f6d2b9f1fc09e022fd8e4bb9f920b77998aa3901587de8c5ce17d828ae8
-
SHA512
6b3d426055f33783759d76de9aef74deb0673df2ffd6fc9d9c825ef5f8ed895460a8805ea43b5bf23c3f988f37fe7bf92649c24ae690bf8cfe643e18b3f1dab1
-
SSDEEP
96:R+YL/YAzUs1XZ94me1Zhg44BDrXaRHqLMLOKUNkr2JVLvm9zYEdDEZ7GyTU/cH06:RNzTZ9ZyzsDE7LOKUY2Jlvm9MdZqyX/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b148fa5f3049d63af5195811615fa3ad_JaffaCakes118
Files
-
b148fa5f3049d63af5195811615fa3ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e44cfc71d5ba99dd6dedb0e2f43d741
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
FindResourceExA
user32
GetDlgItemInt
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE