Behavioral task
behavioral1
Sample
d22fc563aa169bbdcb01b3ce249997f1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d22fc563aa169bbdcb01b3ce249997f1_JaffaCakes118
-
Size
45KB
-
MD5
d22fc563aa169bbdcb01b3ce249997f1
-
SHA1
e233909e7247a239b125d32eaf5904588050d0f3
-
SHA256
70e811456bb3a3ed0a124bd6e38a26b53cd4a3f85bcff6faf314dea65bb04087
-
SHA512
6932069b066bf49247b3540c8ae2ae9d371781fd7a65a456ea2aa0bf0f6ecc9dd31d5e93d338f43698546967dacf8f18feb98762b891d0ba35ef790188f26776
-
SSDEEP
768:vdZ6jtc2LNk0aq5CRhyQZtAwwQZxR6ON9VXtI5XuU7ZZ2HifPIP4xWg:lZUS2BtO9zb33Z25XuUNZ2HifPIQUg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d22fc563aa169bbdcb01b3ce249997f1_JaffaCakes118
Files
-
d22fc563aa169bbdcb01b3ce249997f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
db5368f16fc036edb0ea87f29001684a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memcpy
memcmp
_umask
??2@YAPAXI@Z
_spawnl
_stat64
kernel32
GetSystemInfo
GetVersion
GlobalAlloc
GetNextVDMCommand
GetDriveTypeA
GetStdHandle
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE