Behavioral task
behavioral1
Sample
8ea0906f958898428e15f5312e08fd3d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ea0906f958898428e15f5312e08fd3d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ea0906f958898428e15f5312e08fd3d_JaffaCakes118
-
Size
159KB
-
MD5
8ea0906f958898428e15f5312e08fd3d
-
SHA1
77f364da0b374b160205c3487c7590dea943c8c0
-
SHA256
1718dc9b0cae250e7b7c7b48b349a9511107f4f2512351c204991f3fd3772354
-
SHA512
f615858246d9eb4a58d9b84aae33ba7353de77a27dc6acf94105252f0f4f64af559d6040efc294e6d5977286f1672eb3832ec61dd86e6eac55f2baf6cb14346b
-
SSDEEP
1536:6uq+1sPwGFjFzn97QvQRY/hKSQsaaKMhV/511KGiYlW1L5oa096OF/IRu7gbai:B1SnVaQREKjslxK+I1G6br
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ea0906f958898428e15f5312e08fd3d_JaffaCakes118
Files
-
8ea0906f958898428e15f5312e08fd3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
1bd77b151cbc39229105281dd6671327
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WaitForSingleObject
VirtualQueryEx
VirtualProtectEx
VirtualFree
VirtualAlloc
TerminateThread
SetThreadPriorityBoost
SetThreadAffinityMask
SetFilePointer
SetConsoleWindowInfo
SetCommTimeouts
OutputDebugStringW
LocalReAlloc
LoadLibraryExW
LoadLibraryW
GlobalFix
GetProcAddress
GetNumberOfConsoleMouseButtons
GetModuleHandleA
GetLastError
GetCurrentProcess
GetCommTimeouts
FillConsoleOutputCharacterW
ExitThread
ExitProcess
CreateRemoteThread
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetCurrentThreadId
GetStartupInfoA
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetSecurityDescriptorLength
GetOldestEventLogRecord
GetFileSecurityA
GetCurrentHwProfileW
gdi32
GetTextCharacterExtra
GetEnhMetaFileA
GetCurrentObject
user32
GetKeyboardType
MessageBoxA
SetDebugErrorLevel
LoadAcceleratorsW
LoadAcceleratorsA
GetTabbedTextExtentW
GetLastInputInfo
GetCursorInfo
Sections
UPX0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE