Behavioral task
behavioral1
Sample
016a9799420715aaec3f0ad7dc77406b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
016a9799420715aaec3f0ad7dc77406b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
016a9799420715aaec3f0ad7dc77406b_JaffaCakes118
-
Size
5KB
-
MD5
016a9799420715aaec3f0ad7dc77406b
-
SHA1
218a427729693db30116ee51c88fe3855d77530f
-
SHA256
599e4add63e03108593066e5b7615f66452d17484e6aa887a7cb58295ab1be0d
-
SHA512
4be8561e90ce0b4ac3feba3eaa0746f9821b97433f3abbc1183b2f1c4dacf2b9b3deeb758e3013ac14683685b8db5a56e508e101875d82a206fe79d44530c7d4
-
SSDEEP
96:3cgqIU4pMz1TwTwVdo7tuWFtZGN/IUTn0NUmzf7YINDtz:j+7OTw7oZuWxC/9b0N77YINDtz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 016a9799420715aaec3f0ad7dc77406b_JaffaCakes118
Files
-
016a9799420715aaec3f0ad7dc77406b_JaffaCakes118.exe windows:4 windows x86 arch:x86
90ad4ea86bed0b180a3a74906e00fd48
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ReplaceTextA
shell32
StrStrIW
user32
DdeQueryConvInfo
kernel32
ExitProcess
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE