Behavioral task
behavioral1
Sample
cf6c15809f1dc40f1a8fc2bc986aeb2c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf6c15809f1dc40f1a8fc2bc986aeb2c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf6c15809f1dc40f1a8fc2bc986aeb2c_JaffaCakes118
-
Size
60KB
-
MD5
cf6c15809f1dc40f1a8fc2bc986aeb2c
-
SHA1
51ad91337eec00b6f5307679b066106fb1aa9fc7
-
SHA256
0e1da3db22c88ec8057e07f903fd9c7d68edf2dd2a09cdcf785f0f3c804a602b
-
SHA512
7fa966242f12cb1d90a7df7596c7aefa6e541bb2dc1678c6a7e510ce2b42db30513d71e20ffeb6f2cadd7b55ea00f26e94a1c7f71a074f8ec24778ef2149c2c7
-
SSDEEP
768:c8gp1aV4FPaDkDNhZ1YTvWaYARVZ5jAh1QKCeYE:cVXi6SDk5hZ4nYQVXGkE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf6c15809f1dc40f1a8fc2bc986aeb2c_JaffaCakes118
Files
-
cf6c15809f1dc40f1a8fc2bc986aeb2c_JaffaCakes118.exe windows:4 windows x86 arch:x86
e4d65ae63c93af2cce94643080344e28
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrlenA
lstrcmpiA
WritePrivateProfileStringA
WriteFile
Sleep
SizeofResource
SetLocalTime
SetFilePointer
SetFileAttributesA
SetEndOfFile
RemoveDirectoryA
ReadFile
MoveFileExA
MoveFileA
LockResource
LoadResource
LoadLibraryA
GetVersionExA
GetShortPathNameA
GetProcAddress
GetModuleFileNameA
GetLocalTime
GetFileSize
FreeResource
FreeLibrary
FindResourceA
DeleteFileA
CreateFileA
CopyFileA
CloseHandle
GetCurrentThreadId
GetLastError
CreateDirectoryA
ExitProcess
RtlUnwind
RaiseException
GetCommandLineA
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
gdi32
AngleArc
shlwapi
PathFileExistsA
user32
PostThreadMessageA
PostMessageA
IsWindow
GetWindowThreadProcessId
GetWindow
GetMessageA
GetForegroundWindow
GetClassNameA
FindWindowA
DispatchMessageA
CreateWindowExA
CharNextA
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE