Behavioral task
behavioral1
Sample
28ceeeae6fd16882f99490a27b9fc8f7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
28ceeeae6fd16882f99490a27b9fc8f7_JaffaCakes118
-
Size
167KB
-
MD5
28ceeeae6fd16882f99490a27b9fc8f7
-
SHA1
0fc89f06e46e654032097ea88648b6f8ad92656f
-
SHA256
e2aa1cebe2765ceeee395551f7997cc88721db5bdc9e6bac410aeb199a1d8a6e
-
SHA512
0e47552fdf84248949a7e865b88895623585bcbb368b93b5151d7df8592f4fb69804b42b52eae8d5b6ad583f71156e7ef40e93da808f1a5adaa67fffdc8b9940
-
SSDEEP
3072:jpMkpA4he7++5XPIdVKAkfTxv5hNnMpQ9Sgs3dFVywscVRAlkFTA:j+kAK+JAdoAkfDhNnoWSFNiFqRZpA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28ceeeae6fd16882f99490a27b9fc8f7_JaffaCakes118
Files
-
28ceeeae6fd16882f99490a27b9fc8f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
e27d2e860b3f8e2a0fcc19aadb2f0a4f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetSystemTimeAsFileTime
Sections
.gpch Size: 512B - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.y0da Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE