Behavioral task
behavioral1
Sample
cdef214a4ecbfa071635181cde3b44f2_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
cdef214a4ecbfa071635181cde3b44f2_JaffaCakes118
-
Size
70KB
-
MD5
cdef214a4ecbfa071635181cde3b44f2
-
SHA1
5b7e5a212af770798139f9de0ec855eb83dda5fc
-
SHA256
3ff30a8b458e733d164bec985894f00eb901ff38bdf7b1a9be5f0bcab29a8efa
-
SHA512
3553769406c7591c3c848f16d394596bd60d3249b88045788155afa94e3c67e307549211c0457a561dd8510ade5b2be8dacf6fc9ba2579b1923b81b5e3e9a621
-
SSDEEP
768:C/srvz/JX67UFIWU0imh7UHLSytq1SjYAmFVbh2fOCKJOnsV6p1jmEegOIY:C/4b16YXU0ILSuYbh2WlV6rjmngdY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdef214a4ecbfa071635181cde3b44f2_JaffaCakes118
Files
-
cdef214a4ecbfa071635181cde3b44f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
67814023e8f58dc424fc9d8b39b7235b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
LoadLibraryW
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
Sleep
GetLastError
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
FreeLibrary
lstrcmpW
GetProcAddress
advapi32
OpenProcessToken
GetTokenInformation
scecli
SceGetDbTime
SceFreeMemory
SceSetupRootSecurity
SceNotifyPolicyDelta
SceSvcFree
SceLookupPrivRightName
SceSetupBackupSecurity
SceSysPrep
SceGetServerProductType
SceProcessSecurityPolicyGPOEx
SceOpenPolicy
SceStartTransaction
SceGetAreas
SceGetTimeStamp
SceSetupGenerateTemplate
catsrvut
DllGetClassObject
ManagedRequestW
Sections
UPX0 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kR Size: 5KB - Virtual size: 817KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.SUhx Size: 5KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 9KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qNhk Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 14KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.IMIyZM Size: 3KB - Virtual size: 721KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ