Behavioral task
behavioral1
Sample
e041487e84d1d48bf124172b6678a8e6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e041487e84d1d48bf124172b6678a8e6_JaffaCakes118
-
Size
12KB
-
MD5
e041487e84d1d48bf124172b6678a8e6
-
SHA1
98e1aaf0e50518213de40c99dcac5f39cc62e1d3
-
SHA256
8b39060bda4e1281c8f58b4e151841521a45ef21a7dfc36f806dd824a5ebe3bf
-
SHA512
a7590734b95abcd7c7d40ac1dd4e4831dd2432ea4053bddb0e6554f1ea1729f37ef046973ac610b34625126b138fbe15717ed75b79472ec9ef86277b44feddbc
-
SSDEEP
384:sJYbSbc+yRec+D4imJYbSbc+yRec+D4irM:0YYc+yjYYc+y5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e041487e84d1d48bf124172b6678a8e6_JaffaCakes118
Files
-
e041487e84d1d48bf124172b6678a8e6_JaffaCakes118.exe windows:1 windows x86 arch:x86
d58885771dbd3114af90c2527e64aca2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
comctl32
ImageList_Add
gdi32
GdiFlush
Chord
msvcrt
printf
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE