Behavioral task
behavioral1
Sample
dde555d81fa241ab54687308cfb50939_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dde555d81fa241ab54687308cfb50939_JaffaCakes118
-
Size
47KB
-
MD5
dde555d81fa241ab54687308cfb50939
-
SHA1
db45e45166ef476c5a54e94564b8d52612c7ec71
-
SHA256
5327912eedcf3447f5b7a1d9bf5fc21314842935d5429925e42d9111d27132da
-
SHA512
bba5e749a07393a02755283936ea13bf942d5d7b4701c5e7a205d8e53c5153f534c8f279a4194e12c6f7f43afd1e8333e27fbb00ec59f6d82de76fce70a49cea
-
SSDEEP
768:md8peuIQFvIsULpiAvJnJvL2YX762UD9RpnZAhWW9Sg3kqYfXvpt7hMnWlKg:iDSvBUNiUnFL1rPO9RtZAhWlg3kJXFM0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dde555d81fa241ab54687308cfb50939_JaffaCakes118
Files
-
dde555d81fa241ab54687308cfb50939_JaffaCakes118.exe windows:4 windows x86 arch:x86
60180305da1b391f4fc2af5784ddd919
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TransactNamedPipe
GetMailslotInfo
GetConsoleMode
SetFileApisToOEM
VDMConsoleOperation
lstrcatA
gdi32
UpdateICMRegKeyA
SetViewportExtEx
OffsetWindowOrgEx
CreateColorSpaceA
Sections
UPX0 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE