Behavioral task
behavioral1
Sample
3afcd27279e6d6893090926c37b87e01_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3afcd27279e6d6893090926c37b87e01_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3afcd27279e6d6893090926c37b87e01_JaffaCakes118
-
Size
192KB
-
MD5
3afcd27279e6d6893090926c37b87e01
-
SHA1
c577f0892c6dbe7b9e33d434983c372d7818d083
-
SHA256
a4de9a54d5f92f75bc617eaf5b2771b5cfce106ac172aadadcdffe2018a986df
-
SHA512
08d075de789942a3c133321bc408b70332d6a9314ea9ed6869f3fe37509dfdf5d229e10bc372dafec29d573367d9ca37500cc4fe3566c2585b57c0ff95585fa1
-
SSDEEP
3072:B8ptauocnIJqxqERUa5SP9dT8H6//Z7qE8wrwUzERy1vI:GptpnIcOXr0w8+nlI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3afcd27279e6d6893090926c37b87e01_JaffaCakes118
Files
-
3afcd27279e6d6893090926c37b87e01_JaffaCakes118.exe windows:4 windows x86 arch:x86
628ca94bffcc60c375d9ccfc81075e43
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
InterlockedIncrement
OutputDebugStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
LocalFree
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
user32
LoadStringA
MessageBoxA
CreateWindowExA
SetWindowPos
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassExA
DefWindowProcA
PostQuitMessage
SetForegroundWindow
ole32
CoCreateInstance
CoInitialize
OleRun
CoUninitialize
oleaut32
SysStringLen
SysAllocStringByteLen
SysFreeString
SysAllocString
GetErrorInfo
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 104KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE