Behavioral task
behavioral1
Sample
e138c5bc72e1c12f0e774ac8dff93e2e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e138c5bc72e1c12f0e774ac8dff93e2e_JaffaCakes118
-
Size
332KB
-
MD5
e138c5bc72e1c12f0e774ac8dff93e2e
-
SHA1
f4e3dcab4236d84c35326bfe1de529c13842b8b8
-
SHA256
cfb0dd194f913e21dff48a854bfffcf2f0a6cf6f23685d161988782c9000fd34
-
SHA512
73b4eed5cb0791bd3c981ec2be7c419fa3a0ceae0164a94adc23a6f4f2cb49ed6c0a0ff6ec9b7de51e448e6bfa3bc9afdce5ca2a0c0c0300f460b6a47bf0814c
-
SSDEEP
6144:73raBCDorABnclRDvO4SIA1AT+UBiPVCi55bdbP9GwCUKMCux:73raBxbDvJAmTs9C+hGaCk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e138c5bc72e1c12f0e774ac8dff93e2e_JaffaCakes118
Files
-
e138c5bc72e1c12f0e774ac8dff93e2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
1a2fe87eb23dcc52b8855aa2b4929dc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
libvlc
VLC_AddIntf
VLC_CleanUp
VLC_Create
VLC_Destroy
VLC_Init
VLC_Version
rootwrap
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetVersion
LoadLibraryA
SetUnhandledExceptionFilter
lstrcmpA
msvcrt
_putenv
_strdup
__getmainargs
__p__environ
__p__fmode
__set_app_type
__wgetmainargs
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fprintf
free
getenv
malloc
memset
signal
user32
MessageBoxA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 400B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX Size: 238KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE