Behavioral task
behavioral1
Sample
2c127e1d1ce33a1156bd369d22778f15_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2c127e1d1ce33a1156bd369d22778f15_JaffaCakes118
-
Size
49KB
-
MD5
2c127e1d1ce33a1156bd369d22778f15
-
SHA1
32201785ea42ca327f3bcab8dfeb9567a74437e9
-
SHA256
6ebbe2c389ddc14a96564275f923811e77786efe0739b6379597ea2c536ed615
-
SHA512
a2465cee2100182e6f0b78efc9c762b1e7e67bd38ab31f11c399ecd32b78466499ce4c4848cf4afc1bdb7840bc626b8ca460a6db67b2c6375a91d409a16e658a
-
SSDEEP
768:vUqDHqBavawa+f0CY97sTyemZ0JiTPy8XqINyIvL9K/lC6rzqJGJiEttq5POkaT6:cHBwavCwsTtdJiteYk9rxFDq52lM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c127e1d1ce33a1156bd369d22778f15_JaffaCakes118
Files
-
2c127e1d1ce33a1156bd369d22778f15_JaffaCakes118.exe windows:4 windows x86 arch:x86
fab25a76403daaa630932d91bac19e18
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
MakeDragList
shell32
StrStrA
kernel32
WinExec
user32
CallWindowProcA
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE