Behavioral task
behavioral1
Sample
c24a115bd1ef75d46d75d4987d046ed3_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c24a115bd1ef75d46d75d4987d046ed3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c24a115bd1ef75d46d75d4987d046ed3_JaffaCakes118
-
Size
52KB
-
MD5
c24a115bd1ef75d46d75d4987d046ed3
-
SHA1
d226eea3450b823231faa56ec4dff278833dea72
-
SHA256
fa025ac2f8f37f76168c271fe619ee05cab2f433540678a1cbd040f2f6250e49
-
SHA512
cad8476aa5988dedb42ee2f5e7d7e4b424a526f5f57ee754c2497921cb7c07b03cc63534f3e230d02e2ef4f934521d21b36438f72fa015543b429711e1e1daef
-
SSDEEP
1536:R3OYHS9G56io1kogWLEQFmfpE3TW1emB6p1TpfQ0L56AYJ:IGE+JPQIf5QbnF9IJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c24a115bd1ef75d46d75d4987d046ed3_JaffaCakes118
Files
-
c24a115bd1ef75d46d75d4987d046ed3_JaffaCakes118.exe windows:1 windows x86 arch:x86
9817b955894da4725b466526a007931d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
user32
MessageBoxA
advapi32
RegCreateKeyExA
gdi32
StretchBlt
ws2_32
ntohl
Sections
UPX0 Size: - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE