Behavioral task
behavioral1
Sample
3cac25d8885fc7f71678a15a0f6aea09_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
3cac25d8885fc7f71678a15a0f6aea09_JaffaCakes118
-
Size
285KB
-
MD5
3cac25d8885fc7f71678a15a0f6aea09
-
SHA1
4aac0d6642bdb1f726a3e8912774df73e459091f
-
SHA256
0521981bd87c3e64a3691700f5c16c70e96d8b02acf95a2f797acbacd89e5668
-
SHA512
1f9a10a0d6b192ed1d48620aa6fb01c17cc26ec96069a486742868bdb112270cd54c1c032cfddfbfffd29df0ce5165edc2d5bf05fe6ccaddc7a5880d8108fc3e
-
SSDEEP
6144:C+YTI3jLl4f4Ufya8HKykzokX6eiEyrSOOTks0cviDlBFl8:C+BjIga8qtoApiEYmTkQv2BFl8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cac25d8885fc7f71678a15a0f6aea09_JaffaCakes118
Files
-
3cac25d8885fc7f71678a15a0f6aea09_JaffaCakes118.exe windows:4 windows x86 arch:x86
2f54d6d28b89e71d11eb51e57c01872c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
advapi32
IsValidSid
avicap32
capGetDriverDescriptionA
comctl32
ImageList_Add
gdi32
SaveDC
gdiplus
GdipFree
msacm32
acmStreamSize
netapi32
Netbios
ntdll
NtUnmapViewOfSection
NtQuerySystemInformation
ole32
IsEqualGUID
oleaut32
VariantCopy
shell32
ShellExecuteA
shfolder
SHGetFolderPathA
urlmon
URLDownloadToFileA
user32
GetDC
version
VerQueryValueA
wininet
FtpPutFileA
winmm
waveInOpen
ws2_32
WSAIoctl
wsock32
send
Sections
UPX0 Size: - Virtual size: 476KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE