Behavioral task
behavioral1
Sample
15722c5805996a2886c3274436706baa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15722c5805996a2886c3274436706baa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15722c5805996a2886c3274436706baa_JaffaCakes118
-
Size
49KB
-
MD5
15722c5805996a2886c3274436706baa
-
SHA1
44c5a2bfd4442a14153352ee4721ab3e5f77f026
-
SHA256
dd7a8a24f07b03d676539d026b70cef2c480c8ba19aed4bc7c729bd2acebe186
-
SHA512
3431c590c3883cf8a448fb6cc107fb5d50fd9016b04542540c348f2ee12b76bb90734fe060a6d9046e99790a5c762b49f4ea66e52352ac6805cb3f93e1da0792
-
SSDEEP
768:PME8v2jhknQrngZCX0AuQRtfNDxxe/vjqx:PME8v2jhknGgZmXDx67qx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15722c5805996a2886c3274436706baa_JaffaCakes118
Files
-
15722c5805996a2886c3274436706baa_JaffaCakes118.exe windows:4 windows x86 arch:x86
aaa5ca1462a96544534b786aa9808a1f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
LocalFree
GetModuleFileNameA
GetExitCodeThread
ReadFile
TerminateProcess
lstrcpynA
MultiByteToWideChar
CloseHandle
lstrlenA
LoadLibraryA
GetProcAddress
GetLastError
FreeLibrary
lstrcpyA
OutputDebugStringA
WaitForSingleObject
CreateThread
GlobalFree
WriteFile
SetFilePointer
GlobalAlloc
GetStartupInfoA
GetModuleHandleA
lstrcmpA
RemoveDirectoryA
GetVersionExA
OpenProcess
CreateFileA
GetWindowsDirectoryA
GetSystemDirectoryA
lstrcmpiA
CopyFileA
CreateProcessA
CreateDirectoryA
GetFileSize
Sleep
DeleteFileA
advapi32
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
mfc42
msvcrt
_initterm
__p__fmode
__p__commode
_adjust_fdiv
__set_app_type
__getmainargs
_acmdln
exit
_XcptFilter
__setusermatherr
_exit
__dllonexit
??1type_info@@UAE@XZ
strchr
atoi
memcpy
_except_handler3
atof
_mbscmp
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
memcmp
strstr
_onexit
memset
_CxxThrowException
_controlfp
__CxxFrameHandler
ole32
CoUninitialize
CoInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
oleaut32
rpcrt4
UuidFromStringA
shell32
ShellExecuteA
user32
MessageBoxA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE