Behavioral task
behavioral1
Sample
972c2b532bff6c4a03d43a557ce076c6_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
972c2b532bff6c4a03d43a557ce076c6_JaffaCakes118
-
Size
344KB
-
MD5
972c2b532bff6c4a03d43a557ce076c6
-
SHA1
bdd62543315a471b2b872137e57131fbd794072b
-
SHA256
c8efcbc4857d7df09c0662f7ed6dec117e3551506376a00ea62ec589574671bb
-
SHA512
556893e48008baaf69f9e49f52b733e4bf06a8b04632afe0ddc5d21877b9aa67233b6e8c2ffa6a6f6e88c8e9d64157ce41b57a941cb24c4da666bac41c109ded
-
SSDEEP
6144:+aiDL05sLDj2HDdtIF6l5sLDj2HDdtIF6///G2qb8rRhMwo:oDA5SyHBtIF45SyHBtIFa//G2q0h3o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 972c2b532bff6c4a03d43a557ce076c6_JaffaCakes118
Files
-
972c2b532bff6c4a03d43a557ce076c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
4ab9e442863b099964838b5eb857f922
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
GetProcAddress
GetModuleFileNameW
GetPrivateProfileStringW
CloseHandle
GetTickCount
CreateProcessW
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
HeapReAlloc
HeapAlloc
GetOEMCP
GetSystemInfo
VirtualProtect
GetCPInfo
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetStringTypeW
GetStringTypeA
DeleteCriticalSection
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
HeapSize
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
InitializeCriticalSection
RaiseException
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualFree
HeapCreate
HeapDestroy
VirtualQuery
GetModuleFileNameA
GetStartupInfoW
GetModuleHandleA
HeapFree
RtlUnwind
ExitProcess
LocalFree
GetLastError
GetVersionExA
GetSystemTimeAsFileTime
user32
GetSystemMetrics
UpdateLayeredWindow
GetWindowDC
GetParent
GetClientRect
LoadStringW
LoadAcceleratorsW
RegisterWindowMessageW
GetMessageW
SetTimer
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
GetDesktopWindow
ShowWindow
UpdateWindow
LoadIconW
LoadCursorW
DestroyWindow
DialogBoxParamW
EndDialog
BeginPaint
EndPaint
PostQuitMessage
SendMessageW
SetWindowLongW
GetWindowLongW
DefWindowProcW
RegisterClassExW
CreateWindowExW
SetWindowPos
GetWindowRect
EqualRect
GetDC
ReleaseDC
gdi32
CreateDIBSection
SelectObject
GetDeviceCaps
BitBlt
DeleteDC
DeleteObject
CreateCompatibleDC
ole32
OleSetContainedObject
CoLoadLibrary
OleCreate
OleDraw
CoInitialize
oleaut32
SysAllocString
SysAllocStringLen
SysFreeString
GetErrorInfo
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 180KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 104KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE