Behavioral task
behavioral1
Sample
ffa2124c67abc83001f199bd7265f7b3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffa2124c67abc83001f199bd7265f7b3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ffa2124c67abc83001f199bd7265f7b3_JaffaCakes118
-
Size
14KB
-
MD5
ffa2124c67abc83001f199bd7265f7b3
-
SHA1
51b6265517745257202edccd0d8a7c2d36e47cd5
-
SHA256
b77a9f4e8480a9b1a9b859235b6297bc1ef6694346e9799b60ef08f1e9f01a6f
-
SHA512
74e09373837e0d740ee987f4409d358d05849b579596fbd4d48580d09d65dd4772e839dea81b54ea896bf14994283dd2b0ff6dac16c70232333850cdbca0432e
-
SSDEEP
192:AhE7RcB+h1fYKDCaeXYo0qzDvr96jNRtWOuvPPbErzJ1LXHoeLfPwQJJqE1N9I58:AWRcB05Y7JnPGJ1DDbRJJ9XJiAxMin
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffa2124c67abc83001f199bd7265f7b3_JaffaCakes118
Files
-
ffa2124c67abc83001f199bd7265f7b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
410a1cf5e716ffcc50f66067129699ea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AdjustTokenGroups
kernel32
CreateThread
user32
BlockInput
gdi32
Chord
ws2_32
htonl
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE