Behavioral task
behavioral1
Sample
8ad3d3584cd8bb9b8c372a1335ca1efb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ad3d3584cd8bb9b8c372a1335ca1efb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ad3d3584cd8bb9b8c372a1335ca1efb_JaffaCakes118
-
Size
56KB
-
MD5
8ad3d3584cd8bb9b8c372a1335ca1efb
-
SHA1
483eabc0927358f5616e553786cd025de7cf7599
-
SHA256
28f0d77a12de8da094ed22b886a33ac5bdc3d33d4889de00ffd847c33944572c
-
SHA512
e9fdf292f0ad0bf35df20879558001264046cdd33114b8bb946420981902a0af66fc5446a38d3ae98f52f682ecc05151d7c74249b279723d2eeab8adf0f0596a
-
SSDEEP
768:XxwjVWujnqi+vX5Qg/dtxuS0EreDgtgj4+iOsO1XZRLJ:M7qHQ3LDegpD3ZZj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ad3d3584cd8bb9b8c372a1335ca1efb_JaffaCakes118
Files
-
8ad3d3584cd8bb9b8c372a1335ca1efb_JaffaCakes118.exe windows:4 windows x86 arch:x86
7436aec477005dd8839e2d218d8ceff2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WriteProcessMemory
WinExec
WaitForSingleObject
VirtualFreeEx
VirtualAllocEx
Sleep
ReadProcessMemory
OpenProcess
GetSystemTime
GetProcAddress
GetModuleHandleA
CreateRemoteThread
CreateMutexA
CompareStringA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
WideCharToMultiByte
GetThreadLocale
GetStartupInfoA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
user32
TranslateMessage
SetTimer
SendMessageA
KillTimer
GetWindowThreadProcessId
GetMessageA
FindWindowExA
FindWindowA
DispatchMessageA
GetKeyboardType
MessageBoxA
wininet
InternetReadFile
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE