Behavioral task
behavioral1
Sample
ba8c4d50d3a56cb48eba7f452289c9f4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ba8c4d50d3a56cb48eba7f452289c9f4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba8c4d50d3a56cb48eba7f452289c9f4_JaffaCakes118
-
Size
104KB
-
MD5
ba8c4d50d3a56cb48eba7f452289c9f4
-
SHA1
2835a1276e94f5cf6c917c4bedcef80399cbaf81
-
SHA256
8bb1e01fd56f1ed99f68586c5b06afefaa539b44909db9970458f1e235bba976
-
SHA512
f02e028ed65e69d172c6d8c32c0693d6314555dc003e789fe55d22c76f708b496002577d236b970d9890a81e5bf7180bdf437796144acd9d2dc43ebb6bc98e56
-
SSDEEP
1536:hiqmQK/SZYibSXZeIZ+FMqgQ7gdSnHIkyiFbwGS099:KX/SyiuplZ+uedoWFbw899
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba8c4d50d3a56cb48eba7f452289c9f4_JaffaCakes118
Files
-
ba8c4d50d3a56cb48eba7f452289c9f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd7a3f6620bf35f7fa700db1b2c317ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WritePrivateProfileStringA
WriteFile
WinExec
TerminateProcess
Sleep
SizeofResource
SetFilePointer
SetFileAttributesA
SetEndOfFile
ReadFile
OpenProcess
OpenMutexA
MoveFileExA
MoveFileA
LockResource
LoadResource
LoadLibraryA
GetWindowsDirectoryA
GetVolumeInformationA
GetVersionExA
GetSystemDirectoryA
GetShortPathNameA
GetProcAddress
GetModuleHandleA
GetFileAttributesA
FreeResource
FindResourceA
ExitProcess
DeleteFileA
CreateThread
CreateMutexA
CreateFileA
CopyFileA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
GetThreadLocale
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
advapi32
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenServiceA
OpenSCManagerA
ControlService
CloseServiceHandle
oleaut32
SysFreeString
shell32
ShellExecuteA
user32
GetKeyboardType
MessageBoxA
CharNextA
TranslateMessage
SendMessageA
PostMessageA
GetMessageA
FindWindowExA
DispatchMessageA
Sections
UPX0 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE