Behavioral task
behavioral1
Sample
ad4b9c965c1b1f8e971b07559ae1209a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ad4b9c965c1b1f8e971b07559ae1209a_JaffaCakes118
-
Size
12KB
-
MD5
ad4b9c965c1b1f8e971b07559ae1209a
-
SHA1
d1b7efa6956555c22715c0ef2d8df4dd18d1d546
-
SHA256
6b96baeff0003458b058a7ae9de6a1f4ff67f8674d084dd6a06cfd80e1497861
-
SHA512
d4557681e78344a352112b0988735c852bd40528b1305c3e6fbc306d0bc7453d15e92389b3df1b26759501072b31e423fffa3b3aeaeba4f3bf3a88baa8a774d7
-
SSDEEP
192:wEjg/dwRNzbK42nOXyThyaZuW4zbFKyw1DcKzgRfO1Hi3DxkjrlKMu4MwaHm8xG:LqmRBhDBaZuW41KyWO+wyBKdH4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad4b9c965c1b1f8e971b07559ae1209a_JaffaCakes118
Files
-
ad4b9c965c1b1f8e971b07559ae1209a_JaffaCakes118.exe windows:4 windows x86 arch:x86
b46ead522a346c3a0732882852f5cd15
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
user32
GetDlgItem
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE