Behavioral task
behavioral1
Sample
297677e312935d3d2a5f24453830753c_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
297677e312935d3d2a5f24453830753c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
297677e312935d3d2a5f24453830753c_JaffaCakes118
-
Size
37KB
-
MD5
297677e312935d3d2a5f24453830753c
-
SHA1
7168df5e1effbae5b1feafd0f51f85d1b246e721
-
SHA256
7d67d051e4229b2f354567d9d46b99892c3b71d49948a13fbc52116a4b8f2b39
-
SHA512
f08bc1444ac3df9715938e8562cdc5845364f7187792f82bf4f948cf9a726896ebc3e1063e51de5e25a650391532cb9caaa79fb60177a65f2d83645c2f43edb6
-
SSDEEP
384:t1GELUT47IU2x7mlerml4ejTyAd4vPG5Q7Ddtmn5c7Q:tvLUT47Wml3jTlilJwn5c7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 297677e312935d3d2a5f24453830753c_JaffaCakes118
Files
-
297677e312935d3d2a5f24453830753c_JaffaCakes118.exe windows:4 windows x86 arch:x86
50cfcf20728a225e9d7ea15affc7a9e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
lstrcpynA
ExitProcess
CreateThread
ExitThread
lstrcatA
lstrcpyA
GetDateFormatA
GetModuleHandleA
WaitForSingleObject
GetTimeFormatA
GetStringTypeW
GetStringTypeA
SetHandleCount
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
HeapAlloc
GetCurrentProcess
LCMapStringA
LoadLibraryA
GetProcAddress
GetOEMCP
LCMapStringW
GetACP
GetCPInfo
TerminateProcess
MultiByteToWideChar
WriteFile
RtlUnwind
GetFileType
GetStdHandle
GetEnvironmentStringsW
gdi32
SelectObject
CreateFontIndirectA
TextOutA
SetBkMode
CreateEllipticRgn
SetTextColor
DeleteObject
CreateSolidBrush
user32
RegisterClassExA
wsprintfA
MessageBoxA
DialogBoxParamA
DestroyWindow
ShowWindow
SetWindowRgn
GetDC
CreateWindowExA
GetSystemMetrics
IsCharAlphaNumericA
LoadIconA
SendMessageA
SendDlgItemMessageA
GetDlgItem
SetWindowTextA
EndDialog
GetWindowTextA
DefWindowProcA
LoadCursorA
wininet
InternetGetConnectedState
ws2_32
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE