Static task
static1
Behavioral task
behavioral1
Sample
FULLWALL cuasogame/FULL WALL CUASOGAME.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
FULLWALL cuasogame/FULL WALL CUASOGAME.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
FULLWALL cuasogame/uhvui.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
FULLWALL cuasogame/uhvui.dll
Resource
win10v2004-20240802-en
General
-
Target
d45e1e8a7a82b83ca3c01a04d81c67d9_JaffaCakes118
-
Size
279KB
-
MD5
d45e1e8a7a82b83ca3c01a04d81c67d9
-
SHA1
fd32a14f312e4c569eeed9f5b89a305a801bdf08
-
SHA256
4cd3fc2c585c7d82d1e97aed7e3c719c0901dcf5434870eb06af46febe829b54
-
SHA512
71d0afba4b2acd8e51bb36919adee9411725288b1ca5c4adda66624e86c7c4d83cb7b96b492945da8c676d7226e51846226f67091fcd29d49b83841041d3d110
-
SSDEEP
6144:vsP2sZbP91QnLUNt0KJp0C3sRZktQcbO2t5:vsPPlvQLm0KJz36atn5
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/FULLWALL cuasogame/FULL WALL CUASOGAME.exe unpack001/FULLWALL cuasogame/uhvui.dll
Files
-
d45e1e8a7a82b83ca3c01a04d81c67d9_JaffaCakes118.rar
-
FULLWALL cuasogame/FULL WALL CUASOGAME.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
FULLWALL cuasogame/uhvui.dll.dll windows:4 windows x86 arch:x86
03c42a0190ed9ba71f6026a9a818d41a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
FindWindowA
gdi32
CreateDIBSection
Sections
.text Size: 50KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE