Behavioral task
behavioral1
Sample
24e44a3c659d412329a70968b9004597_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
24e44a3c659d412329a70968b9004597_JaffaCakes118
-
Size
127KB
-
MD5
24e44a3c659d412329a70968b9004597
-
SHA1
1558f59d09f267eeb825213c0421679622d9d812
-
SHA256
127f2ff58c15cf2403672ef28441f9d848764743c2b3d1c1b378c483ff745f43
-
SHA512
a02d66088e81079ab56a1777afcbe0ac928963a80701d0d7a9f9322ab16312cda70a092100d3afa5e7639117561466122b1bbc27c26152c9f6a1de787385c9f7
-
SSDEEP
3072:7ICVsqXH9lzZmQwTrHJsiZbatMHzCdi/:rVRddgXPpHd2Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24e44a3c659d412329a70968b9004597_JaffaCakes118
Files
-
24e44a3c659d412329a70968b9004597_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE