Behavioral task
behavioral1
Sample
1686139bcd371821fd272521b8059864_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1686139bcd371821fd272521b8059864_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1686139bcd371821fd272521b8059864_JaffaCakes118
-
Size
7KB
-
MD5
1686139bcd371821fd272521b8059864
-
SHA1
1433ece8ee5621726314c33e22fe42af77fba691
-
SHA256
efba49c2fa5b56bd42dddc4b9b966153f60c5037b1686f841d842c1dcf1cee50
-
SHA512
e67ffb91796c105f53ae9326526b8cca16a1319b9db3ec2a371db128b75ccb7b8428b7fd1d5ccc2ae6214257094f4dad78fc6f245a085ca0e3384f3b97e1f77d
-
SSDEEP
192:GNkDaaFznDJCDQ1ia9GsIh84Jn1z7YINd+P:GNBaCaaV1HY8o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1686139bcd371821fd272521b8059864_JaffaCakes118
Files
-
1686139bcd371821fd272521b8059864_JaffaCakes118.exe windows:1 windows x86 arch:x86
90ad4ea86bed0b180a3a74906e00fd48
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ReplaceTextA
shell32
StrStrIW
user32
DdeQueryConvInfo
kernel32
ExitProcess
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE