Static task
static1
Behavioral task
behavioral1
Sample
f69174da2bd7467f3a09637169ea547f_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f69174da2bd7467f3a09637169ea547f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f69174da2bd7467f3a09637169ea547f_JaffaCakes118
-
Size
44KB
-
MD5
f69174da2bd7467f3a09637169ea547f
-
SHA1
df95b85c321ddffbe8cc5961992337577b8f9286
-
SHA256
87161ce9390b10e17735caa07c4e16003b07545d7969a9001e0d986d46f97b35
-
SHA512
43b56711ac8869769b6562e7ec0016ce9e1fd274ed55835021937e43dbe6b0e1e6b84e15f75939d35d5ab42cb0b6bfc757962bb3c882bf39bc0a177fc819de11
-
SSDEEP
384:gC3ksvGC6zvqZRInllc0CTeKyqYTIZR+dIru25QEs4NQLtSqLn:gCUBzSSli0CToqYV65Y4+tSM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f69174da2bd7467f3a09637169ea547f_JaffaCakes118
Files
-
f69174da2bd7467f3a09637169ea547f_JaffaCakes118.exe windows:4 windows x86 arch:x86
545fbf6d1b7d341edd99c56f54932090
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
lstrcpynA
HeapAlloc
GetCurrentProcess
HeapFree
GetCurrentThread
GetProcessHeap
WriteFile
SetProcessPriorityBoost
Sleep
IsBadWritePtr
SetPriorityClass
lstrcatA
GetEnvironmentVariableA
SetThreadPriority
GetShortPathNameA
GetModuleFileNameA
WinExec
CloseHandle
GetTempPathA
lstrcpyA
CreateFileA
TerminateProcess
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsSetValue
SetLastError
GetCurrentThreadId
GetLastError
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
InitializeCriticalSection
GetStdHandle
VirtualFree
VirtualAlloc
HeapReAlloc
LoadLibraryA
RtlUnwind
user32
wsprintfA
advapi32
RegSetValueExA
RegCreateKeyA
shell32
SHChangeNotify
ShellExecuteExA
wininet
InternetOpenUrlA
HttpQueryInfoA
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetGetConnectedState
iphlpapi
GetAdaptersInfo
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ