Behavioral task
behavioral1
Sample
3fcb24383e281d1063341e43796700b1_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
3fcb24383e281d1063341e43796700b1_JaffaCakes118
-
Size
49KB
-
MD5
3fcb24383e281d1063341e43796700b1
-
SHA1
81921db6beb1c0779e0c17d4bfbf1ad9b0d2e73a
-
SHA256
ea2f66a7d6841549a78dbcb29cb8045fd4e6af2e1f3b9626aab6b143230dcb91
-
SHA512
903e0f050f13b98016b5d72f00df79799dcfabbc0e29cd1c29e1561c063954eac36a78559c4694032b53caa23c1196eb67d006ef4e3a1fc629932d12cd313434
-
SSDEEP
1536:4UoGyhu/nlRIxoHcP7WGJXDRcEzH8lBp:4UoGTPvqaO5U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fcb24383e281d1063341e43796700b1_JaffaCakes118
Files
-
3fcb24383e281d1063341e43796700b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
fab25a76403daaa630932d91bac19e18
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
MakeDragList
shell32
StrStrA
kernel32
WinExec
user32
CallWindowProcA
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE