Behavioral task
behavioral1
Sample
948802174db47299ee58e1c814dd781a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
948802174db47299ee58e1c814dd781a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
948802174db47299ee58e1c814dd781a_JaffaCakes118
-
Size
337KB
-
MD5
948802174db47299ee58e1c814dd781a
-
SHA1
a9d607c068a13ec6ac14bf77a9a144d81d9b8e4d
-
SHA256
63153b7620fc6de3e36c3f5153f634ad6387b4a3acf1a08e9dc881727bfc7ab8
-
SHA512
ee5d68800bd1ca2093dc8bed9b6cef31356507f80bbc82dc0dcb86523c2a3e101cfcc2965d6daf6f854fc2cc510705a1adc1d103569fc5c418b09601ec4088fd
-
SSDEEP
1536:O+2IVP/m0LlC8L2DaaK5fLUbGX41ncntm:O6xDLldL214foKX41nstm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 948802174db47299ee58e1c814dd781a_JaffaCakes118
Files
-
948802174db47299ee58e1c814dd781a_JaffaCakes118.exe windows:4 windows x86 arch:x86
0fbae3d9f0608c9ba5de1c9c21a8fab9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
FindFirstFileA
SystemTimeToFileTime
SetFileTime
FindClose
GetVersionExA
CreateToolhelp32Snapshot
Process32First
WritePrivateProfileStringA
CloseHandle
GetSystemDirectoryA
TerminateProcess
OpenProcess
DeleteFileA
GetWindowsDirectoryA
GetStartupInfoA
GetModuleFileNameA
SizeofResource
LoadResource
FindResourceA
FreeLibrary
GetPrivateProfileStringA
GetProcAddress
LoadLibraryA
GetLastError
DeviceIoControl
GlobalFree
LoadLibraryExA
GlobalAlloc
GetModuleHandleA
CreateFileA
GetVersion
LocalFree
FormatMessageA
SetSystemTime
Process32Next
GetCurrentProcessId
GetSystemTime
advapi32
StartServiceA
DeleteService
OpenSCManagerA
CreateServiceA
OpenServiceA
RegCloseKey
CloseServiceHandle
RegSetValueExA
RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
comctl32
_TrackMouseEvent
gdi32
GetObjectA
CreateCompatibleDC
StretchBlt
CreateFontIndirectA
mfc42
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_setmbcp
atoi
_mbscmp
sprintf
__CxxFrameHandler
printf
fprintf
_iob
free
calloc
_CxxThrowException
__dllonexit
_onexit
??1type_info@@UAE@XZ
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_controlfp
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
user32
LoadCursorA
InvalidateRect
ReleaseDC
GetParent
EnumWindows
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
LoadIconA
GetWindowTextA
CopyIcon
ShowWindow
GetWindowThreadProcessId
wsprintfA
GetDesktopWindow
GetWindowLongA
SetWindowLongA
LoadImageA
SendMessageA
SetWindowPos
SetTimer
PostMessageA
FindWindowA
SetWindowTextA
SetCursor
LoadBitmapA
GetWindowRect
SetParent
KillTimer
EnableWindow
wininet
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
FindCloseUrlCache
DeleteUrlCacheEntry
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
Sections
UPX0 Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE