Behavioral task
behavioral1
Sample
361be1f13a9a4553c81dda65d6f06594_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
361be1f13a9a4553c81dda65d6f06594_JaffaCakes118
-
Size
576KB
-
MD5
361be1f13a9a4553c81dda65d6f06594
-
SHA1
c5bf75546014e404ec2110821384296d7c835460
-
SHA256
de6a74b5273ade55cb206959b5befb5a48b97e165e219b6c2fd53d432397ab3d
-
SHA512
ac559b100ddaa434bc25eb85ceb89ed16a8114ba3437782e06cf46b7a7566e79b31b0b12198ec82892061b420b8d4ea0e4477b2739b8250325152d5ff2f022bf
-
SSDEEP
12288:8TOAkRj7IqoRHaxYmzzxrFdLh/20lRSgiT2Jpek8w7g1:86AkRjyaxYmdxdLxtyGV8l1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 361be1f13a9a4553c81dda65d6f06594_JaffaCakes118
Files
-
361be1f13a9a4553c81dda65d6f06594_JaffaCakes118.exe windows:4 windows x86 arch:x86
aac60df60ca85a65dc1aa5d99d8cccdd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
lstrlenA
GetTempPathA
RemoveDirectoryA
SetCurrentDirectoryA
EnumResourceNamesA
GetUserDefaultLangID
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessA
GetPriorityClass
GetCurrentProcess
GetCommandLineA
lstrcmpiA
DeleteFileA
SetFileAttributesA
lstrcatA
GetStartupInfoA
ExitProcess
GetModuleHandleA
user32
CharNextA
wsprintfA
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 906B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 456KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 104KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE