Behavioral task
behavioral1
Sample
29087d03cff75af0218b27039962d1c7_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
29087d03cff75af0218b27039962d1c7_JaffaCakes118
-
Size
180KB
-
MD5
29087d03cff75af0218b27039962d1c7
-
SHA1
7c7feb769cac2d8556f2dcff39be004bf952e378
-
SHA256
ccf30dde721f036b496a98ba3070b7bf599d6d562fa77b2ee0be335f3d2d7f15
-
SHA512
8c7516968589fa0140ef0439bbec5cfac314b208f03eba4b0bf8223a9ed52d100c68dda5d3829a633304eeabee8b2457dcef41ab45df17b22e44a7c5c9d322f5
-
SSDEEP
3072:IbEv6etqH/2Vur6RmPon3QOJbmNh7MMGdl9oFGKbIq2T2FB+Hk6CmJsk:IvHUumAFFS9oFGKbIq2KFBeJt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29087d03cff75af0218b27039962d1c7_JaffaCakes118
Files
-
29087d03cff75af0218b27039962d1c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
19e243722b3813be070d9835c7c259d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
SearchPathA
ReadFile
SetEndOfFile
GetCurrentDirectoryA
WinExec
GetModuleHandleA
FindNextFileA
SetCurrentDirectoryA
FindFirstFileA
CopyFileA
FindClose
Beep
GlobalUnlock
GlobalAlloc
GlobalLock
WriteFile
GlobalFree
CreateFileA
DeleteFileA
GetModuleFileNameA
MapViewOfFile
GetFileSize
CreateFileMappingA
CloseHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
FlushFileBuffers
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnmapViewOfFile
LoadLibraryA
SetStdHandle
GetCurrentProcess
TerminateProcess
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
SetHandleCount
GetProcAddress
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetFileType
GetLastError
HeapReAlloc
GetFileAttributesA
UnhandledExceptionFilter
HeapAlloc
HeapFree
user32
DrawTextA
EndDialog
GetWindowRect
ReleaseDC
GetClientRect
GetDC
GetSysColor
SendMessageA
GetDlgItem
FillRect
ScreenToClient
EnableWindow
PostMessageA
SetWindowTextA
WinHelpA
DialogBoxParamA
MessageBoxA
LoadStringA
SetFocus
GetWindowTextA
EndPaint
CharNextA
SetDlgItemInt
SetWindowPos
GetSystemMetrics
LoadIconA
GetWindowLongA
GetDlgItemInt
wvsprintfA
LoadCursorA
FindWindowA
BeginPaint
SetWindowLongA
gdi32
BitBlt
RealizePalette
DeleteObject
SelectObject
CreatePalette
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
SelectPalette
LineTo
MoveToEx
DeleteEnhMetaFile
PlayEnhMetaFile
CreatePen
CreateSolidBrush
GetStockObject
GetEnhMetaFileA
GetDeviceCaps
StretchDIBits
SetBkColor
GetMapMode
CreateBitmap
SetStretchBltMode
SetDIBitsToDevice
SetMapMode
comdlg32
GetOpenFileNameA
GetSaveFileNameA
ChooseFontA
ChooseColorA
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 104KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE