Behavioral task
behavioral1
Sample
f58d4b4e9af197e4e1d1fef3a0cb28fc_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f58d4b4e9af197e4e1d1fef3a0cb28fc_JaffaCakes118
-
Size
7KB
-
MD5
f58d4b4e9af197e4e1d1fef3a0cb28fc
-
SHA1
130443cbd0d1a6d8a7829b9dfec6ac8b569b8791
-
SHA256
9cda5e0a6b50354772cc4c4aba517eeea1a858d8d789098929ac05ad5f25bbf6
-
SHA512
6320fce32ea467239423bca7259afee742a05b3f764cfeb66bd20a0e02b71cf47be0d60a41b291d2dee92c356162d48f14c6ecc17f5b0de6735147b86aacfe65
-
SSDEEP
96:zeQXjiwvQV9jXLklv/Mdz3bQaSFCoewdzG1YrN3igKeQ2JPU/:3XjiGQVtoqdzrWLq1QiD3QPU/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f58d4b4e9af197e4e1d1fef3a0cb28fc_JaffaCakes118
Files
-
f58d4b4e9af197e4e1d1fef3a0cb28fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e44cfc71d5ba99dd6dedb0e2f43d741
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
FindResourceExA
user32
GetDlgItemInt
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE