Static task
static1
Behavioral task
behavioral1
Sample
f2488cb909f5d32e001ee8fc8c2b657d_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f2488cb909f5d32e001ee8fc8c2b657d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f2488cb909f5d32e001ee8fc8c2b657d_JaffaCakes118
-
Size
124KB
-
MD5
f2488cb909f5d32e001ee8fc8c2b657d
-
SHA1
c79d0dc6c2945a79b9eb46cfee11083b95ef5d10
-
SHA256
6f62ee0c866ab43b0a9faa127ca4321c5703a553c072671235f9439105aede28
-
SHA512
76dff9b3d4ee90adb4ac1eca66065b3254a36b1331440ef916989b282a10fd5afbc62dcb9feb82fe81caa7f4c5dd3db96149b6f9faba6edbde9ef352bcd0f909
-
SSDEEP
1536:7namKDwjsxhhQqjzCEZ2uLWER+nH0xMBmLxgof6ZpgYjZOuQuWu:jQDwjsxhhQMCuX//WBmLxgof6MY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2488cb909f5d32e001ee8fc8c2b657d_JaffaCakes118
Files
-
f2488cb909f5d32e001ee8fc8c2b657d_JaffaCakes118.exe windows:4 windows x86 arch:x86
7ecccc45d2f260a160d1748f37667bd8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesA
FindNextFileA
FindFirstFileA
GetCurrentProcess
DeleteFileA
FindClose
MultiByteToWideChar
OpenProcess
TerminateProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
GetModuleFileNameA
CopyFileA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
SetEndOfFile
ReadFile
GetTempPathA
CreateDirectoryA
GetLastError
GetFileAttributesA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
RaiseException
CloseHandle
WriteFile
SetFilePointer
WideCharToMultiByte
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetUnhandledExceptionFilter
FlushFileBuffers
SetStdHandle
CreateFileA
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEnvironmentVariableA
advapi32
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegRestoreKeyA
RegOpenKeyA
RegSaveKeyA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
imagehlp
MakeSureDirectoryPathExists
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ