Behavioral task
behavioral1
Sample
215ca67c42f5afd732ccebc1f4c7aa9a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
215ca67c42f5afd732ccebc1f4c7aa9a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
215ca67c42f5afd732ccebc1f4c7aa9a_JaffaCakes118
-
Size
164KB
-
MD5
215ca67c42f5afd732ccebc1f4c7aa9a
-
SHA1
fb2498e5d3f171460fc514b8549400e405e8f340
-
SHA256
f67729c777a1f880f825f40355c5fec350b42540c8494c4ab599e86753c874cd
-
SHA512
2a94213a2b397d9d04f46653c9dba37d0671107bb4b862c895a24ec9e7dd8065ec9b4d1e1493030fc5abb9c40cb2330ce308b5d0825c2c35b54a82bf8379dc70
-
SSDEEP
3072:Z9O4uWMPUnevTJCsZZcdJ2U+NJBjo0wBdeAX2RCTBoturxV0s8+vMz:ZoRP3vrOcU8pFwBd1X2R2n8+kz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 215ca67c42f5afd732ccebc1f4c7aa9a_JaffaCakes118
Files
-
215ca67c42f5afd732ccebc1f4c7aa9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
c0cca02b06dd8d375a59b02d4f31de2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenFile
GetSystemDirectoryA
GetLocaleInfoA
GetUserDefaultLCID
FreeLibrary
GetProcAddress
LoadLibraryA
OpenProcess
GetModuleHandleA
GetVersionExA
Sleep
GetModuleFileNameA
CloseHandle
CreateProcessA
GetWindowsDirectoryA
ReadFile
GetOEMCP
GetACP
CreateFileA
FlushFileBuffers
SetStdHandle
lstrcmpiA
CopyFileA
lstrcpynA
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrcpyA
lstrcatA
GetExitCodeProcess
lstrlenA
GetStringTypeW
GetStringTypeA
InterlockedExchange
GetCPInfo
RtlUnwind
GetLastError
DeleteFileA
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
ExitProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
RaiseException
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetFilePointer
HeapReAlloc
SetEndOfFile
user32
MessageBoxA
wsprintfA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
advapi32
RegCreateKeyExA
RegEnumValueA
RegSetValueExA
RegEnumKeyA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 104KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE