Static task
static1
Behavioral task
behavioral1
Sample
f6d0b7f3db4d5366b468e48cafd59a9a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6d0b7f3db4d5366b468e48cafd59a9a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f6d0b7f3db4d5366b468e48cafd59a9a_JaffaCakes118
-
Size
808KB
-
MD5
f6d0b7f3db4d5366b468e48cafd59a9a
-
SHA1
7bc3d5ba1934c2175c6c5f2d7e8685c089a19637
-
SHA256
e57de06c2830ecdf814e9bc84e9ff0c2e6f1c243b9f9fc8dc0dd172191e9381b
-
SHA512
0192734d9d46e68fcfe2b996644eaa2d1499742f9b4dc031584aa6c61d461c26ec6cc46c930a8560eac13bc7398b03b2ba3d722682d0d5f57ee276ee8d62d6ae
-
SSDEEP
12288:0SNXipFPNrNJGJuMNNx+ovKg4nKzIdM+Z:01F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6d0b7f3db4d5366b468e48cafd59a9a_JaffaCakes118
Files
-
f6d0b7f3db4d5366b468e48cafd59a9a_JaffaCakes118.exe .vbs windows:4 windows x86 arch:x86 polyglot
cf044153c898d84c13ae1557f40337f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
LoadLibraryA
GetModuleFileNameA
_lclose
_lopen
_lread
_llseek
GetLastError
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetStringTypeA
WideCharToMultiByte
GetStringTypeW
GetCurrentDirectoryA
GetProcAddress
GetACP
lstrcpyA
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStdHandle
HeapCreate
WriteFile
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
lstrcatA
GetCPInfo
MultiByteToWideChar
GetOEMCP
user32
wsprintfA
MessageBoxA
LoadStringA
advapi32
RegCloseKey
RegQueryValueA
RegOpenKeyA
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 791B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ