Static task
static1
Behavioral task
behavioral1
Sample
f2e1c192c412aa3ca221b366b3b610aa_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f2e1c192c412aa3ca221b366b3b610aa_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f2e1c192c412aa3ca221b366b3b610aa_JaffaCakes118
-
Size
237KB
-
MD5
f2e1c192c412aa3ca221b366b3b610aa
-
SHA1
b3f033a0c98d283178f856c3d2780a992fdca194
-
SHA256
dfd7b02685603bb55ce570fe7c25d0b593e094cfdae6cfa52c75cbf941d8cd7c
-
SHA512
1c790647199cd31efe164ae5a08ccfedb272689d0b743bf1b2a1f6393ebf025be2e151175e53e92f9c9fa90dbf8ba6aa0675d770a4712c64c0395e60061c3e70
-
SSDEEP
3072:umPWUitOGy3owSFz4yQY1QxaYR+yCfzjCGZfup2e/kiA0ofI4HJMLjFDLUyaDQYQ:FhwwYPKAYrCnDZf8k0r4glLjHr5/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2e1c192c412aa3ca221b366b3b610aa_JaffaCakes118
Files
-
f2e1c192c412aa3ca221b366b3b610aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6f94d9719359700a4e710d9cb5160aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
FileTimeToLocalFileTime
GetFileAttributesW
GetConsoleFontInfo
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
oleaut32
DispInvoke
CreateErrorInfo
OleSavePictureFile
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString
wininet
InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetReadFile
Sections
.text Size: 135KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE