Behavioral task
behavioral1
Sample
bc2b7b663f0c0070d66ea9bd404999d9_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
bc2b7b663f0c0070d66ea9bd404999d9_JaffaCakes118
-
Size
7KB
-
MD5
bc2b7b663f0c0070d66ea9bd404999d9
-
SHA1
37624032da2147e5f06414c67a032a0b25e67b38
-
SHA256
7f8db981b656edb324439586485ac5bea5ce82d0396a61e783b34e4a5155bc81
-
SHA512
71d93c0dbd6ebd8fef1f886deb17a090ee04fd6f75fdb398542c4e879cbfe7ec901701304ee2e63c801224efc8f4b7415b82608e31cc177accb43752002e3762
-
SSDEEP
192:xN15xejucPztPsGrylA2tLPc5t5tKG3FYJv/:b1eNPz5sG90c5tbv2B/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc2b7b663f0c0070d66ea9bd404999d9_JaffaCakes118
Files
-
bc2b7b663f0c0070d66ea9bd404999d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e44cfc71d5ba99dd6dedb0e2f43d741
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
FindResourceExA
user32
GetDlgItemInt
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE