Static task
static1
Behavioral task
behavioral1
Sample
Label_Copy_UPS.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Label_Copy_UPS.exe
Resource
win10v2004-20240709-en
General
-
Target
43ef7a43b21fb12e0556d90e1b4c9123_JaffaCakes118
-
Size
44KB
-
MD5
43ef7a43b21fb12e0556d90e1b4c9123
-
SHA1
4058f300950afc5c129b8dade4e4244253ede77c
-
SHA256
585afc14cf474d2d3dcbda8e0faa4a007ab74e8a6ce80e65fd1e93b7c35fd499
-
SHA512
4b8a18b567eb2ca7e542a8072c01bb9548ecca9077fabc572c035e6b4b11f103ac93276be907cb0700ea42181a7006a7ef764aa107a10a67b083eaa7cb54489b
-
SSDEEP
768:oKy+WpOiAGV5OjZ0zQchugzEV7gOPzHCOgilc/Wc0v/bUYevW:ooM5OjZZcK9gSewlS07UYevW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Label_Copy_UPS.exe
Files
-
43ef7a43b21fb12e0556d90e1b4c9123_JaffaCakes118.zip
-
Label_Copy_UPS.exe.exe windows:5 windows x86 arch:x86
68f6a4eb46a287ddf51245a610860239
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumWindows
SetWindowTextA
GetActiveWindow
GetWindowThreadProcessId
SetDlgItemTextW
DialogBoxParamA
MessageBoxA
IsCharAlphaA
ole32
CoGetCallerTID
comctl32
InitCommonControlsEx
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
kernel32
HeapDestroy
SetFileAttributesA
GetStartupInfoA
IsValidLocale
GetDateFormatA
GetTickCount
HeapFree
LoadResource
FindResourceA
LocalAlloc
GetProcAddress
FreeLibrary
LoadLibraryA
IsBadReadPtr
IsValidLanguageGroup
HeapAlloc
ExitProcess
HeapCreate
DeleteCriticalSection
InitializeCriticalSection
LocalFree
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ