Behavioral task
behavioral1
Sample
0b9160963804654a1059ab2fe5ce8e65_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
0b9160963804654a1059ab2fe5ce8e65_JaffaCakes118
-
Size
7KB
-
MD5
0b9160963804654a1059ab2fe5ce8e65
-
SHA1
e5fa62d962816bdb9054989dc780830fd098a88c
-
SHA256
1ab1190a85ab613c02be2aa32da7ad8c85c20d412a84a287d6a2023b0fb48bb6
-
SHA512
f60da1e64805521e7ca41f18c14035f18b5ea224343f8ecfb039335d6eb112a2a94bb5ad8a43fe96bb2a5f70848210ac90df12630ba6fd1a58ec8dd0a84b12f6
-
SSDEEP
192:QaS98aKn6qOwFAsltVqvK1JHtdgjxMW2YSZm:I98f6qOgPlLqizt6Ge
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b9160963804654a1059ab2fe5ce8e65_JaffaCakes118
Files
-
0b9160963804654a1059ab2fe5ce8e65_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e44cfc71d5ba99dd6dedb0e2f43d741
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
FindResourceExA
user32
GetDlgItemInt
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE