Behavioral task
behavioral1
Sample
0730d7d6339dbb8f824d5fb9307ce642_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
0730d7d6339dbb8f824d5fb9307ce642_JaffaCakes118
-
Size
89KB
-
MD5
0730d7d6339dbb8f824d5fb9307ce642
-
SHA1
fef845173fb0d9335b2e7db5ed74d9850c953b3d
-
SHA256
b205c4a13ced5fd89743eb6d37bb2f279fff2f83dc2835d1dda61590e07b8a2f
-
SHA512
fa392d97f11bdac9d431ba4191942dadebfbbeb1febcb673045273aec492e8803f020524cafcdf50b997692e034f217a8d94c023b858a7b89a3e189a85b37fb9
-
SSDEEP
1536:nEtlgR6Xb5VU+OQYBAGsVgdGTIBrXq+J//vBXyQq+deyaZIZAw9dSPuMl4:nEthVRjYcarXqOvhyQney7AhPu0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0730d7d6339dbb8f824d5fb9307ce642_JaffaCakes118
Files
-
0730d7d6339dbb8f824d5fb9307ce642_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 404KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE