Behavioral task
behavioral1
Sample
a46e9da2a13110af88096e49f305b245_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a46e9da2a13110af88096e49f305b245_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a46e9da2a13110af88096e49f305b245_JaffaCakes118
-
Size
844KB
-
MD5
a46e9da2a13110af88096e49f305b245
-
SHA1
85613f0b4755be03e95b4d327787d31a0515346c
-
SHA256
585ccf8ee4f43b4b81736f9ea279bb6477784c04995057a6cf071a736d9a944b
-
SHA512
308b527d8d73620f49ddaf31f0fec123b2bf5b6de8370265d66e4129fef603dcc49ee1e66634189ecad6a6d2a356a17c5f980e6b1d17c405cc54b9eecc6d7a5a
-
SSDEEP
768:olCcq6QJSChwjTj3mfscZJ6eVAJrg957yRH5++7jznzaJ8xR5RnOQmOGEiDNct:Bcq6QJjUQzZJd74P3uuxR5RnOLOGEiD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a46e9da2a13110af88096e49f305b245_JaffaCakes118
Files
-
a46e9da2a13110af88096e49f305b245_JaffaCakes118.exe windows:4 windows x86 arch:x86
785ca06552df49eadafbc951174c8820
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
Sleep
WriteFile
VirtualQuery
GetVersionExA
GetThreadLocale
GetStringTypeExA
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetDiskFreeSpaceA
GetCPInfo
GetACP
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
CreateMutexA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
WideCharToMultiByte
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
oleaut32
SysFreeString
urlmon
URLDownloadToFileA
user32
GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
MessageBoxA
LoadStringA
GetSystemMetrics
CharNextA
CharToOemA
Sections
UPX0 Size: 840KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE