Behavioral task
behavioral1
Sample
7540298c7f31bbe7deaf1e22de1ae356_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7540298c7f31bbe7deaf1e22de1ae356_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7540298c7f31bbe7deaf1e22de1ae356_JaffaCakes118
-
Size
73KB
-
MD5
7540298c7f31bbe7deaf1e22de1ae356
-
SHA1
94470d011b4c0664ffa9613f6d78e3c63292b581
-
SHA256
f6026edf56d5d42e634626b8924a2769aabae026555eb798987fcd7044356ce2
-
SHA512
74c8e9ebde6f60dff02b06e2afd15d425e85ba8e874541277a46be71f50e79c1b2df080590c1432d211361269d8c474a47b16c4d7d4415f8dfb21633a970ddaf
-
SSDEEP
1536:cNqUEpeQAJ2dm4aQTa4kjZYEX0IGX2rU4:eDJA0WXkjZZXxGX2rU4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7540298c7f31bbe7deaf1e22de1ae356_JaffaCakes118
Files
-
7540298c7f31bbe7deaf1e22de1ae356_JaffaCakes118.exe windows:1 windows x86 arch:x86
b6ce51d0491f490c656f701549109b5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
lstrcpyA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
GetModuleFileNameA
VirtualQuery
LoadLibraryA
GetWindowsDirectoryA
GetVersionExA
GetThreadLocale
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetDiskFreeSpaceA
GetCurrentProcessId
GetComputerNameA
GetCPInfo
FreeLibrary
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
DeleteFileA
CopyFileA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetUserNameA
oleaut32
VariantChangeTypeEx
VariantCopyInd
VariantClear
SysStringLen
SysFreeString
SysAllocStringLen
rasapi32
RasGetErrorStringA
RasGetEntryDialParamsA
RasEnumEntriesA
user32
GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
MessageBoxA
LoadStringA
GetSystemMetrics
wsock32
WSACleanup
WSAStartup
gethostname
gethostbyname
socket
send
recv
inet_ntoa
inet_addr
htons
connect
closesocket
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE