Behavioral task
behavioral1
Sample
161a1930793667b42cfb0659e7c59950_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
161a1930793667b42cfb0659e7c59950_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
161a1930793667b42cfb0659e7c59950_JaffaCakes118
-
Size
42KB
-
MD5
161a1930793667b42cfb0659e7c59950
-
SHA1
a575b52044bbdc5155baa7dc02e5de9c70821bd8
-
SHA256
23e85b9021aa14d75943b83bf8422e67f7059c9b7cdfaf92a7b157149ab689aa
-
SHA512
c6af1783a37b5038ff87f01828dbad8106660e43381eed1df54d9f94376fb11a2633c4593e557cabc3b34af65583761b917dd7429c74a1236fc64f82267cc890
-
SSDEEP
768:+Tk7oMqKO1W4pPoRwKuF3dFJwyBLaHFH9tpqMr:+TUoMqKn4pgRwBWFH9pr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 161a1930793667b42cfb0659e7c59950_JaffaCakes118
Files
-
161a1930793667b42cfb0659e7c59950_JaffaCakes118.exe windows:4 windows x86 arch:x86
4a472c2eec25ab9055f0bebe75431131
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
FormatMessageA
lstrlenA
lstrcpyA
FreeLibrary
GetExitCodeThread
CreateThread
GlobalFree
DeleteFileA
WriteFile
CloseHandle
GlobalAlloc
WaitForSingleObject
CreateFileA
SetFilePointer
lstrcatA
GetVersionExA
GetCommandLineA
ExitProcess
GetModuleHandleA
lstrcmpA
CreateDirectoryA
GetWindowsDirectoryA
GetProcAddress
GetDateFormatA
SetLastError
OutputDebugStringA
GetLastError
LoadLibraryA
Sleep
GetTimeFormatA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
rasapi32
RasGetConnectStatusA
RasHangUpA
RasEnumConnectionsA
shell32
ShellExecuteA
user32
SendMessageA
SetWindowPos
GetWindowRect
GetDesktopWindow
EnableWindow
ShowWindow
MessageBoxA
FindWindowA
SetWindowTextA
CharLowerA
EndDialog
SetDlgItemTextA
GetDlgItem
DialogBoxParamA
wininet
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
wsock32
WSAStartup
inet_addr
gethostbyaddr
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE