Behavioral task
behavioral1
Sample
072f42023ca65d2b620cb6f2f5b0835f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
072f42023ca65d2b620cb6f2f5b0835f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
072f42023ca65d2b620cb6f2f5b0835f_JaffaCakes118
-
Size
39KB
-
MD5
072f42023ca65d2b620cb6f2f5b0835f
-
SHA1
37cbb012e9d62344c11fde3dc2547fb6261c3949
-
SHA256
6e01444f38f136d283bda94f086d4005bca664064214e3f15b1de423f7c4a180
-
SHA512
94d7fc81fb810a546549c876b205ffdb4a4fb912198d677cc1060be6119218e1cb071dedd517f554881871a4916c30ae32e279db4cd91e84998bd8636b3c0bca
-
SSDEEP
768:wOlYtD5X8iDE/YyHPyBuThNRmdZ8olVLRwBg:92s0zduUrea
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 072f42023ca65d2b620cb6f2f5b0835f_JaffaCakes118
Files
-
072f42023ca65d2b620cb6f2f5b0835f_JaffaCakes118.exe windows:4 windows x86 arch:x86
08c7ba42bc91ee4dd2a36bfaf8f4afc0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
CreateRemoteThread
GetCurrentProcess
OpenProcess
ReadProcessMemory
CloseHandle
Process32First
CreateToolhelp32Snapshot
GetTickCount
VirtualAllocEx
GetStartupInfoA
CreateEventA
Sleep
GetModuleHandleA
GetProcAddress
GetShortPathNameA
CopyFileA
FindResourceA
SizeofResource
LoadResource
LockResource
DeleteFileA
WriteFile
ExitProcess
VirtualProtectEx
advapi32
RegOpenKeyExA
RegSetValueExA
RegCloseKey
msvcrt
__getmainargs
_stricmp
_controlfp
strcat
strcpy
strlen
rand
srand
_exit
_XcptFilter
exit
_acmdln
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE