Behavioral task
behavioral1
Sample
3024e0d7888b5844254757cc4eee4f50_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
3024e0d7888b5844254757cc4eee4f50_JaffaCakes118
-
Size
61KB
-
MD5
3024e0d7888b5844254757cc4eee4f50
-
SHA1
e08013dd39294ae91a37e7aac012948cb659d851
-
SHA256
aa92a5aa8355c3fe97cbfea970d7aa4ce6bdbde7c577bb42a3965b55bf489961
-
SHA512
3e13598037b290fa7400c0e0f77574ad60fc7955dbe9bede48928e396c2a63144844b60d23b0ff526bfb6946b6b9c88e2850ea64c8770cefa9958c3ac32d4701
-
SSDEEP
1536:70ISAn05Pk+WPrBj1qLK2oSz0n8bh+ERw+3ieD7yY:4knUs+Wx1qLKH+SSw7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3024e0d7888b5844254757cc4eee4f50_JaffaCakes118
Files
-
3024e0d7888b5844254757cc4eee4f50_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yuxuan Size: 188B - Virtual size: 188B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE