Behavioral task
behavioral1
Sample
2ca48ae89892e2da81f7521185bb6471_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ca48ae89892e2da81f7521185bb6471_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ca48ae89892e2da81f7521185bb6471_JaffaCakes118
-
Size
180KB
-
MD5
2ca48ae89892e2da81f7521185bb6471
-
SHA1
a0306455531fa660c1d25b9e36d2f28a371931df
-
SHA256
4a670fcff8a266d32e27699b2c0a0d140982d22a3556102bdbc7d1025e8d7194
-
SHA512
c315a1633ac11eb16052c764b7553915162dd0d770e931ff8bda53d47a163a595edd6909e2290d4ac443b32bae3b633a83ac0187779895559216b0330ac5b6a5
-
SSDEEP
3072:S2597SutkEH9LqluAw5Dyi1fG10ej6AzUCd061/xjbL/qt9w:Fj7Szl5wtt2HVL/+G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ca48ae89892e2da81f7521185bb6471_JaffaCakes118
Files
-
2ca48ae89892e2da81f7521185bb6471_JaffaCakes118.exe windows:4 windows x86 arch:x86
494b12210512cddb5afb3164cf3c0a72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathAddBackslashA
PathAppendA
kernel32
GetCurrentProcess
CloseHandle
WaitForSingleObject
CreateProcessA
GetSystemInfo
GetProcAddress
GetVersionExA
GetSystemDirectoryA
GetModuleFileNameA
FlushFileBuffers
CreateFileA
GetModuleHandleA
FreeEnvironmentStringsW
RaiseException
RtlUnwind
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
Sleep
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapSize
LoadLibraryA
InitializeCriticalSection
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
user32
GetSystemMetrics
advapi32
RegQueryValueExA
RegOpenKeyExA
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 104KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE