SPACE
Static task
static1
Behavioral task
behavioral1
Sample
f7f6d8fddfedb9546a495a7aefae8a2a_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
f7f6d8fddfedb9546a495a7aefae8a2a_JaffaCakes118
-
Size
494KB
-
MD5
f7f6d8fddfedb9546a495a7aefae8a2a
-
SHA1
1af489ba4a7b75abab8837e24d1d787259c888d1
-
SHA256
ae81fc3af1bbe392a52bf6d95448947dc0dce5a1507c20c6ccd027a82f2ed6b7
-
SHA512
b1434cd8fd4bd109669fb2f6e2740f689466cd606926a6e6d604efcb99ca15ab237596b577800db667543f5c96b5f9585f5a6a1a656aaa2c1ca2a17ea5f0b1c6
-
SSDEEP
6144:weMrKAi2OFyKmfez3s/czAMM2g8zGfQl8tVwrueeb3xBG3Gp1ZbeR:weMrK8OFHz38c2vVPeu3oR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7f6d8fddfedb9546a495a7aefae8a2a_JaffaCakes118
Files
-
f7f6d8fddfedb9546a495a7aefae8a2a_JaffaCakes118.exe windows:4 windows x86 arch:x86
6a840c6d13f2426e70491d771e0030e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc
VirtualProtect
VirtualFree
IsBadReadPtr
HeapFree
CloseHandle
WriteFile
CreateFileA
OutputDebugStringA
HeapReAlloc
RtlUnwind
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsBadCodePtr
SetStdHandle
FlushFileBuffers
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Exports
Exports
Sections
PAGE Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 206KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ