Behavioral task
behavioral1
Sample
82be2d48e4511d06af16a0e3770fe1b1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
82be2d48e4511d06af16a0e3770fe1b1_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
82be2d48e4511d06af16a0e3770fe1b1_JaffaCakes118
-
Size
159KB
-
MD5
82be2d48e4511d06af16a0e3770fe1b1
-
SHA1
802c76a626c8eebb059948c2612ba9ffb6360cc7
-
SHA256
8bdc73d70f9513ecf506fb87fd090c29a761d7fd27dd06b5f335b46b5d2d0c52
-
SHA512
ebfaaaba56df8e0357828c469f352f5d99239833f0aa8c9c98ba8e994c8bbb3cc5a12310290738d3e1590192bd28495fce1ce7e58e18296ab4619a14ec28b224
-
SSDEEP
3072:saHFqZ+LJQifSeIuhpi8MF5XbcDCX4Zne:sac+Bf4F54a0ne
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82be2d48e4511d06af16a0e3770fe1b1_JaffaCakes118
Files
-
82be2d48e4511d06af16a0e3770fe1b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
380843bdfafb9d3944dca081b8b9b230
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
LoadResource
GlobalAlloc
SizeofResource
FindResourceA
GetModuleHandleA
lstrcatA
GetModuleFileNameA
ReleaseMutex
FindClose
FindNextFileA
DeleteFileA
WriteFile
CreateDirectoryA
lstrcpyA
GetSystemDirectoryA
GetLastError
CreateMutexA
lstrlenA
GetVersionExA
WritePrivateProfileStringA
GetPrivateProfileStringA
GlobalFree
CreateProcessA
WaitForSingleObject
CloseHandle
Sleep
FindFirstFileA
GetSystemTime
GetStartupInfoA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
msvcrt
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
user32
CharLowerA
wsprintfA
Sections
UPX0 Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE