Behavioral task
behavioral1
Sample
02a61ddd67efb58d544ad54268e49549_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
02a61ddd67efb58d544ad54268e49549_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
02a61ddd67efb58d544ad54268e49549_JaffaCakes118
-
Size
38KB
-
MD5
02a61ddd67efb58d544ad54268e49549
-
SHA1
279b74cf719aeeb42eedf75c67a55ee7990bef1a
-
SHA256
2af93e2e2c31b7486d912eee18184687e71ee07777b81a26b896ae1d832e63ba
-
SHA512
ddc08ae8730714c639caa50c2d92044f0ca0f5d4245150bf9774503e2b750d37b22041b4be6798f16cf23ec7d84f1c552bf855d3e7509f0596db034be83227e8
-
SSDEEP
384:+5XMcDhNb/w5YlaXF9YWos5juHvYiJuQLr4uNveaiJdF9fGGUxjMbeHw:+5XMc/+gWuvJuQLr4MZIL9GGUxqeHw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02a61ddd67efb58d544ad54268e49549_JaffaCakes118
Files
-
02a61ddd67efb58d544ad54268e49549_JaffaCakes118.exe windows:4 windows x86 arch:x86
da2ceca73732240be2d1a78ffd00b476
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateMutexA
CreateThread
DeleteFileA
FindResourceA
GetEnvironmentVariableA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
LocalAlloc
LocalFree
MoveFileA
MoveFileExA
OpenMutexA
ReadFile
SetCurrentDirectoryA
SetFilePointer
Sleep
TerminateProcess
WinExec
WriteFile
lstrcatA
lstrlenA
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
imagehlp
CheckSumMappedFile
user32
ExitWindowsEx
GetDlgItem
GetWindowTextA
PostMessageA
EnumWindows
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE