Behavioral task
behavioral1
Sample
b7b60f40d54acafc51e9d9085173d178_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
b7b60f40d54acafc51e9d9085173d178_JaffaCakes118
-
Size
53KB
-
MD5
b7b60f40d54acafc51e9d9085173d178
-
SHA1
6df5521548d757c6c3b733aeea0a7c4769296efb
-
SHA256
d8556a5f40b0e2f1e8b573fa30bd9bfc194e45cf315021a90ccb5f68f5239617
-
SHA512
74876d685803a674c6cf6897798b19c0e37931e439fdf45d8fe6e65b7c017d7409ac5a55c1fe8a425e6d586cc40f830b89ffc1f5d8b33695efd6b0ce711e3130
-
SSDEEP
768:MRSL/qpe0RYzIVz85KpBw+qLTSijd1qCtzlXa1ZYRG28uhog+fTT7nmBBUnXG17l:MRSAZ7VhKDTSijd1q0E2higi+snXw7nl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7b60f40d54acafc51e9d9085173d178_JaffaCakes118
Files
-
b7b60f40d54acafc51e9d9085173d178_JaffaCakes118.exe windows:1 windows x86 arch:x86
9e7163cbb8220d303acb31f22cb8306f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CopySid
kernel32
CloseConsoleHandle
user32
CreateCursor
gdi32
CancelDC
ws2_32
inet_addr
Sections
UPX0 Size: - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE