Behavioral task
behavioral1
Sample
15a493bb799d47c848ef5242434b6603_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
15a493bb799d47c848ef5242434b6603_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15a493bb799d47c848ef5242434b6603_JaffaCakes118
-
Size
113KB
-
MD5
15a493bb799d47c848ef5242434b6603
-
SHA1
c1094ff92ca60324a1f5c39c51a7e3e9121fafeb
-
SHA256
8409263dab85ef2270c2cecca6a2ff74f9ff4f5fbdd3062d5d7dbdce3c724351
-
SHA512
2d6f4e803632854dae44b36ec95b2f34d515d1d57c5f6c349798547db02196ea5adb7d8b57afc092db524c2fae2244786b656f24633f8779b9d8795a334b2064
-
SSDEEP
3072:YNJId62d8ii9clTX9p90tjpxjdFImXoEJJN7xQC+T9JBS7UDuUEYxHc:MN2d8iw2X9p2jpb6P6JN79+T9JBS7UD4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15a493bb799d47c848ef5242434b6603_JaffaCakes118
Files
-
15a493bb799d47c848ef5242434b6603_JaffaCakes118.exe windows:4 windows x86 arch:x86
69ca8490c5b2e9697aaa0f3cbb96d5a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLocalTime
FileTimeToSystemTime
GlobalFree
GetLocalTime
GetTickCount
GetTimeZoneInformation
SystemTimeToFileTime
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileIntA
CloseHandle
GlobalAlloc
GetFileSize
CreateFileA
GetPrivateProfileStringA
GetModuleHandleA
GetModuleFileNameA
lstrcpyA
ExitProcess
user32
SetWindowPos
SendMessageA
SetWindowTextA
GetWindowRect
GetDlgItem
PostMessageA
SendDlgItemMessageA
SetDlgItemTextA
CopyRect
RegisterClassExA
LoadIconA
GetClassInfoExA
UnregisterClassA
EnableWindow
SetTimer
DialogBoxParamA
GetSysColor
EndDialog
wsprintfA
gdi32
SetTextColor
SetBkColor
CreateSolidBrush
DeleteObject
wsock32
connect
WSACleanup
ntohl
closesocket
gethostbyname
ioctlsocket
sendto
WSAStartup
htons
bind
setsockopt
socket
recv
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 104KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE