Static task
static1
Behavioral task
behavioral1
Sample
f832737dd2a2e3754680dd43a1d5807b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f832737dd2a2e3754680dd43a1d5807b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f832737dd2a2e3754680dd43a1d5807b_JaffaCakes118
-
Size
33KB
-
MD5
f832737dd2a2e3754680dd43a1d5807b
-
SHA1
f170a807e94d7b8ef5dc648b272524bbcce3a037
-
SHA256
51baeb08b5ab46fcf0b94b17cedf671febe66be09adcc7156ad8ca0be185b39c
-
SHA512
b389597a49f4fce41615e0d74d1010edf8b2489b93799fc4be533ef77d399c41b032233b36f39db77b3c0ba6773e3adeef6a27c853e0b3e78d4c278da25b4ae1
-
SSDEEP
384:j9j24m71h9TeTutN2r1/sk4Be+pZJS7gOkqCzIxzPYTACjQCpDCcivOSGLNs51fO:odRd40k6PS7gOkqCicQ4kvOlc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f832737dd2a2e3754680dd43a1d5807b_JaffaCakes118
Files
-
f832737dd2a2e3754680dd43a1d5807b_JaffaCakes118.exe windows:4 windows x86 arch:x86
0e144b8f2e25980362da92d1f270e9e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
pbvm70
ord137
kernel32
GetOEMCP
GetACP
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
LoadLibraryA
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ