Behavioral task
behavioral1
Sample
05ae58c114fe0adb3592b132a8710af9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
05ae58c114fe0adb3592b132a8710af9_JaffaCakes118
-
Size
49KB
-
MD5
05ae58c114fe0adb3592b132a8710af9
-
SHA1
629a477350fded2b5ad78d611dfba2fdd3131365
-
SHA256
de479fe598cc7c07db469b49f23e0d6a70c6403a5f39ac081cb3cc56d8657a18
-
SHA512
50ec31c292554e7cbb9be29354dba562329e10320181a0ecb6767d316cabbfc5acb875c205f02d3e150aaf35ae0d2a5658d9c6951d6f6c187c7af02bf6d00d4e
-
SSDEEP
1536:geQOBkwqHfzYWgw/ac7FvNpOvp6YyHjE49oWTy:geQOBALYWgy7VNEpBYbzTy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05ae58c114fe0adb3592b132a8710af9_JaffaCakes118
Files
-
05ae58c114fe0adb3592b132a8710af9_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b0ca71b10eed981afb56bc2d54d7778
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
comctl32
InitCommonControls
gdi32
RealizePalette
user32
ChangeMenuA
msvcrt
strcpy
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE