Behavioral task
behavioral1
Sample
000bb712f50977781a89a05ac88caced_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
000bb712f50977781a89a05ac88caced_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
000bb712f50977781a89a05ac88caced_JaffaCakes118
-
Size
33KB
-
MD5
000bb712f50977781a89a05ac88caced
-
SHA1
8a31918caa9c9d88f1737262921666017f78fe65
-
SHA256
db3292df3766c1ca9802495045ef67ed22a34c6c015ab38a084840948db5e71e
-
SHA512
1796a388487d2664f6ee2ddc2faa92f953ee7d07bb6694d5ec7ccb487868555adaa8154aaab60d622d1d652c38f3e79e0b59c012fd05b91f92c96e3ab6cc5145
-
SSDEEP
384:CHg+jzczN8IKdHnhxkfpEdcYhGdq0jjYB0LnCWdBR:0g+fcz7K5n3qxbCW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 000bb712f50977781a89a05ac88caced_JaffaCakes118
Files
-
000bb712f50977781a89a05ac88caced_JaffaCakes118.exe windows:4 windows x86 arch:x86
58917dfb4841ba45fcfcf1319d0a5490
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
FreeLibrary
LocalFree
MapViewOfFile
CloseHandle
GetVersionExA
GetWindowsDirectoryA
GetModuleHandleA
GetVersion
CopyFileA
GetShortPathNameA
GetStartupInfoA
GetModuleFileNameA
lstrlenA
GetPrivateProfileIntA
ReleaseMutex
GetLastError
CreateMutexA
GetSystemDirectoryA
UnmapViewOfFile
GetPrivateProfileStringA
GetTempPathA
advapi32
SetEntriesInAclA
SetSecurityInfo
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
GetSecurityInfo
mfc42
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
sprintf
fseek
ftell
_setmbcp
_strnicmp
__CxxFrameHandler
fclose
fwrite
fopen
memmove
_controlfp
free
strstr
fread
malloc
shell32
ShellExecuteA
user32
KillTimer
IsIconic
SendMessageA
GetClientRect
EnableWindow
GetWindowLongA
SetWindowLongA
MoveWindow
DrawIcon
LoadIconA
SetTimer
GetSystemMetrics
wininet
InternetOpenA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE