Behavioral task
behavioral1
Sample
184657fc4487e3e05ecb169ea63d192b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
184657fc4487e3e05ecb169ea63d192b_JaffaCakes118
-
Size
114KB
-
MD5
184657fc4487e3e05ecb169ea63d192b
-
SHA1
aebd24cf7dc59c4b8057b6f479ca7e50966becee
-
SHA256
4408b1049951caddcbcf4eed4bce117775ddb0613ac08bea846a06088b91a8e9
-
SHA512
2be3464d77edce20be9ab6835d88f4f8b5a63f012b7373c9fce9fae4dcbd29a3dbc7a58c40ecad3f844eefd0550cbe60386f122d4d6e6492ac0ac0b28f54ebad
-
SSDEEP
1536:89GFUWPfZTEtuTR7AdZiOgC4togoi8AyAuleEdSMA+pSHTb+/Au67T/6e6:TWWPm+GdZiLXto3i8AycEdS7+cHu/56I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 184657fc4487e3e05ecb169ea63d192b_JaffaCakes118
Files
-
184657fc4487e3e05ecb169ea63d192b_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d26a7db02099737f26267c1519ff9a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
msvbvm60
ord581
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE