Behavioral task
behavioral1
Sample
db0a0ded8be4eaa46c6ed0b4856847a6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db0a0ded8be4eaa46c6ed0b4856847a6_JaffaCakes118
-
Size
22KB
-
MD5
db0a0ded8be4eaa46c6ed0b4856847a6
-
SHA1
be09b91f5a8ec83f35c160ef29dafb364a6d9cac
-
SHA256
eb39c722eb7794a55b441114ced79dee6755f45961101708c99212bceb6f40ab
-
SHA512
2c584792e5d2a09e93bb54aa6e6a46549d9886fc2e327d943231d133f17cf745bd619fa1b1f42928a277c0bff74e00c0adf5bf0c5ccb098903f7e610ce5ec749
-
SSDEEP
192:2WkECh2aCHEDTe/CjGGzTp/wtKpA6rxyCmpXOAoT+mmSBjLbK6oYMFx+ePo:21ECh2aCv/cvzV7yCm9OZ+mmlQMFx+7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db0a0ded8be4eaa46c6ed0b4856847a6_JaffaCakes118
Files
-
db0a0ded8be4eaa46c6ed0b4856847a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
ae0a5112fe1176f4e5f6e1bc95e4c209
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
UPX0 Size: 1024B - Virtual size: 548B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ