Behavioral task
behavioral1
Sample
eecf618eda6a185b9e468d053cfd556c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eecf618eda6a185b9e468d053cfd556c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eecf618eda6a185b9e468d053cfd556c_JaffaCakes118
-
Size
69KB
-
MD5
eecf618eda6a185b9e468d053cfd556c
-
SHA1
a40f0f0c5ab4c0d2551f56ff199622fe39041258
-
SHA256
671402a1acf0989d5f4cba782213b0b60da1a5f61993d95d533afbeddd4ea719
-
SHA512
c4091750e8c1ccde854455afa15b9066ee1493c8d7200c4c0a47ae30eb4e0fcd0d792010470e59eda0c3cc8537c95e6aa357326fa047004031133cf57e6dd71a
-
SSDEEP
768:+Jpl4T8ROkNXZtis18ftIKGkcivF/gyMdR3Nzv0oN3bn4V:egTMisqftIFw+dR9YoBn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eecf618eda6a185b9e468d053cfd556c_JaffaCakes118
Files
-
eecf618eda6a185b9e468d053cfd556c_JaffaCakes118.exe windows:4 windows x86 arch:x86
49a0b70f4ae05d62013dda4201e91369
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CreateMutexA
CloseHandle
WaitForSingleObject
SetThreadPriority
CreateThread
ExitThread
GetComputerNameA
SetPriorityClass
GetCurrentProcess
lstrcmpA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
lstrcatA
lstrlenA
lstrcpynA
GetCurrentDirectoryA
FileTimeToSystemTime
ReadFile
SetFilePointer
GetFileSize
GetFileInformationByHandle
MapViewOfFile
CreateFileMappingA
CreateFileA
WriteFile
UnmapViewOfFile
SystemTimeToFileTime
GetLocalTime
GetTickCount
LoadLibraryA
GetProcAddress
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
ExitProcess
TerminateProcess
SetEnvironmentVariableA
SetCurrentDirectoryA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
user32
wsprintfA
GetDesktopWindow
wininet
FtpPutFileA
FtpCreateDirectoryA
InternetCloseHandle
FtpGetCurrentDirectoryA
InternetConnectA
InternetOpenA
FtpSetCurrentDirectoryA
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE