Behavioral task
behavioral1
Sample
c88bf250e65c682aca7e5d0deecb0c1e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c88bf250e65c682aca7e5d0deecb0c1e_JaffaCakes118
-
Size
7KB
-
MD5
c88bf250e65c682aca7e5d0deecb0c1e
-
SHA1
e8aa981d364ef1b7cc45b19b3a4c01a9f4fea992
-
SHA256
a1f5954fd54537a6b2b3eba8520ea2368d0728c381e4426bc39aa6882e0548af
-
SHA512
0b679542787ea54161d2ecd13dab2730921885601294021a89535d14a2b05962bad374de204731cc2df818860ccc03077a5acf3edf5742f9c7e76163a1b81622
-
SSDEEP
192:xTYWil21GK5yYImTe7UqtmrsRHKvTMdMqeA84Ios6Z9/:+vl21GK5XaUqM6HKLOFtIos6Z9/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c88bf250e65c682aca7e5d0deecb0c1e_JaffaCakes118
Files
-
c88bf250e65c682aca7e5d0deecb0c1e_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e44cfc71d5ba99dd6dedb0e2f43d741
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
FindResourceExA
user32
GetDlgItemInt
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE