Behavioral task
behavioral1
Sample
d126ac24b4f6e01f3777f3985897229b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d126ac24b4f6e01f3777f3985897229b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d126ac24b4f6e01f3777f3985897229b_JaffaCakes118
-
Size
25KB
-
MD5
d126ac24b4f6e01f3777f3985897229b
-
SHA1
17a9f8467158f0bc64047380afbc69fc68ddea9c
-
SHA256
eb4ce8d79fbb2a0e2bb2d6038e354bce3bf360884e4093df95c46a150c45b266
-
SHA512
5569fefa71aef2f14f3ad6d58c374a80fdfa28c6370b09bc50d639ba4cee3418180de2e5b7a054f5756f2c19e1fa21028588ad1b6c0875a6ff0b370245383ace
-
SSDEEP
96:l9tJkZ+0SxkC7tvbK9miG8GoHP4BcuAPnRoElfCDhN1UD67gZm/Yukna2ACPpVrf:YZFSD7wmiV4BcxPRolD7K+D/BVCPpV2C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d126ac24b4f6e01f3777f3985897229b_JaffaCakes118
Files
-
d126ac24b4f6e01f3777f3985897229b_JaffaCakes118.exe windows:4 windows x86 arch:x86
e6038ec2506dc7c6a96a7dfd6587660e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
DllFunctionCall
__vbaExceptHandler
ProcCallEngine
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE