Behavioral task
behavioral1
Sample
100de4f33a474d9520104f5b3e785485_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
100de4f33a474d9520104f5b3e785485_JaffaCakes118
-
Size
38KB
-
MD5
100de4f33a474d9520104f5b3e785485
-
SHA1
dfbdf0a78dd035a563d13a8e0c49da4aa70cd4f8
-
SHA256
adb96caf287dbd36a29b21e7e155e8d3f7d68ef7db42af14481f130ed303eb6e
-
SHA512
01f29955e467661fda2c616f2a1bb31885e34e48d6f3617780b4730a041c8481ba09b623d900cc8dc6f5db2a81b8d1df7215547b6ada0eb8b8d4b36d8e37f7e5
-
SSDEEP
768:7ZacvKkXKzuv0+tcnGjCbJ8VvhatkLJOiiHYenqtaNcrvWOGqjW6g:7kcvlXs+unYa8VvjL4ZYenqt7rW6g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 100de4f33a474d9520104f5b3e785485_JaffaCakes118
Files
-
100de4f33a474d9520104f5b3e785485_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE