Behavioral task
behavioral1
Sample
ce2cc5ebb9075a3ffed8570535963a1a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce2cc5ebb9075a3ffed8570535963a1a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce2cc5ebb9075a3ffed8570535963a1a_JaffaCakes118
-
Size
121KB
-
MD5
ce2cc5ebb9075a3ffed8570535963a1a
-
SHA1
227f3a91d7cbfec6446b9bbdede5e28829dc8531
-
SHA256
361166b515d89a5a5c0b596badceda1f79cf1f4d9a270779bf47a09275123fe4
-
SHA512
ff8d564fac7839a2998e42c3e6c520fcc4a24c8e49ea0cd375117be43d444c0ae8fd9f5b4acd70676219dc701dac8cd128a21ff13ab5476836d1457ab2d37aec
-
SSDEEP
1536:nlMqlYOQ6iEBDmq2eO4XcT+guP9OGSLe/B8Oxhcr2ooWx:l5oE9mTpZpGSLeZ8OxGr2hWx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce2cc5ebb9075a3ffed8570535963a1a_JaffaCakes118
Files
-
ce2cc5ebb9075a3ffed8570535963a1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
cae9b84b3213372edd603277464ab850
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WriteProcessMemory
WritePrivateProfileStringA
WriteFile
VirtualAllocEx
TerminateProcess
SuspendThread
Sleep
SizeofResource
SetThreadContext
SetLastError
ResumeThread
OpenProcess
MapViewOfFile
LockResource
LoadResource
LoadLibraryA
IsBadReadPtr
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVersionExA
GetThreadContext
GetTempPathA
GetTempFileNameA
GetSystemDirectoryA
GetShortPathNameA
GetProcAddress
GetModuleHandleA
GetLastError
GetFileAttributesA
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
FreeResource
FreeLibrary
FindResourceA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitProcess
DuplicateHandle
DeleteFileA
CreateThread
CreateSemaphoreA
CreateProcessA
CreateFileMappingA
CreateFileA
CopyFileA
CompareStringA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
GetThreadLocale
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
CreateDirectoryA
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegCloseKey
user32
GetKeyboardType
MessageBoxA
CharNextA
TranslateMessage
SendMessageA
PostThreadMessageA
PeekMessageA
GetWindowTextA
FindWindowExA
FindWindowA
DispatchMessageA
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
winmm
waveOutSetVolume
waveOutGetVolume
Sections
UPX0 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE