Static task
static1
Behavioral task
behavioral1
Sample
f092533be1578fa4e1b7e950a581c1ce_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f092533be1578fa4e1b7e950a581c1ce_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f092533be1578fa4e1b7e950a581c1ce_JaffaCakes118
-
Size
244KB
-
MD5
f092533be1578fa4e1b7e950a581c1ce
-
SHA1
bd1fe52a65517c163d72ac82687c0c5520286ef4
-
SHA256
28b61315cd90322811c4e645c967912bce3599ab7cb887861f0f895c3f2b41ae
-
SHA512
3e40d8a485ff79699116e5b53de3b7ed675be81a8a0823d02508154d95376bbf131c108a77473002c432bcd8ee12962e06997a206f618e7d0a4bfb124120b290
-
SSDEEP
6144:+3X/sllIlG4aq4RgtqjEpONeV750dKXTPfy9u:+/s0lG4aqWA6eV75Ol9u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f092533be1578fa4e1b7e950a581c1ce_JaffaCakes118
Files
-
f092533be1578fa4e1b7e950a581c1ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
55cbbbb152667cc4600ff4f3ad020cb9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
CreateDirectoryA
FindFirstFileA
CopyFileA
FreeLibrary
GetProcAddress
GetModuleHandleA
GetDiskFreeSpaceA
GetPrivateProfileStringA
GetVersionExA
GetFullPathNameA
DeleteFileA
SetConsoleTitleA
SetConsoleScreenBufferSize
GetConsoleScreenBufferInfo
AllocConsole
RaiseException
SetEndOfFile
LoadLibraryA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetFilePointer
FindNextFileA
FindClose
GetLastError
CreateProcessA
CloseHandle
GetExitCodeProcess
MultiByteToWideChar
WriteConsoleW
GetModuleFileNameA
GetLocaleInfoA
SetConsoleWindowInfo
GetStdHandle
HeapAlloc
HeapFree
SetFileAttributesA
GetFileAttributesA
ExitProcess
TerminateProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
SetStdHandle
GetFileType
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
WideCharToMultiByte
LCMapStringA
LCMapStringW
FlushFileBuffers
WriteFile
ReadFile
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetCurrentDirectoryA
GetDriveTypeA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
CreateFileA
SetCurrentDirectoryA
user32
MessageBoxA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
IsCharAlphaA
gdi32
GetDeviceCaps
DeleteDC
CreateCompatibleDC
advapi32
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
Sections
.text Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE