Behavioral task
behavioral1
Sample
437244590707d2f37564b4250eecd06d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
437244590707d2f37564b4250eecd06d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
437244590707d2f37564b4250eecd06d_JaffaCakes118
-
Size
133KB
-
MD5
437244590707d2f37564b4250eecd06d
-
SHA1
94bd662a17ca01426d0f9f32cd2fa7a3304cdd1d
-
SHA256
44b08fbaf56411b982c9e55b1bec74ef8e338f15e7d86c21f896e49f35498a48
-
SHA512
9df43d0218f8fe3a599641b4c2fd44cee64f98397dea4536e5698240829829c5fb8c9274d34fbf2c467bffcd4a969383b668426b41b99d217959ff11d2bf9687
-
SSDEEP
3072:EzjAHA+0Lz8hOnOQKgh64fWouCyTf0I6ebTr0M+hYj:EzsHN0nQOOQ1VfHSsI3TleYj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 437244590707d2f37564b4250eecd06d_JaffaCakes118
Files
-
437244590707d2f37564b4250eecd06d_JaffaCakes118.exe windows:4 windows x86 arch:x86
bbf4a2cb2b81042c84b7ced125e6683a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrChrA
user32
PostThreadMessageA
MessageBoxA
advapi32
ControlService
ole32
CoCreateGuid
msvcrt
??3@YAXPAX@Z
kernel32.dll �
GetProcAddress
kernel32
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess
Sections
.text Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiao Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ