Static task
static1
Behavioral task
behavioral1
Sample
fe25be034256e18a2da4a85e99f8448f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe25be034256e18a2da4a85e99f8448f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe25be034256e18a2da4a85e99f8448f_JaffaCakes118
-
Size
170KB
-
MD5
fe25be034256e18a2da4a85e99f8448f
-
SHA1
74aa63509d9ad186ace041489b3bf53dcb97b9cb
-
SHA256
507604fc3466f8180a932166ba88a2fb12acc9dfec03fd6dd610eb543f340604
-
SHA512
883827eab9b3a26347d95bf3eba4dd33f9ddb0ac2a30cff6cb8ed36de45618f9785770a4a0a6dc889c9ea58c45e41765caae7543ae81840cc0dbc33db5c58c9f
-
SSDEEP
3072:vC+RZQLPAY0kOfj1tokBrXPWKRhMB1k+U0DXPV8gmcmmdNjOZnH:zKPrgzo6r+KRhMBVU0DXPucmmdNjOZnH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe25be034256e18a2da4a85e99f8448f_JaffaCakes118
Files
-
fe25be034256e18a2da4a85e99f8448f_JaffaCakes118.exe windows:4 windows x86 arch:x86
c33e32311921881c85b47f7457586e09
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
TerminateProcess
LoadLibraryExA
GetStartupInfoA
ReadFile
VirtualProtect
GetProcAddress
LoadLibraryA
VirtualProtect
GetCurrentThread
SetThreadContext
SetConsoleCP
FreeEnvironmentStringsA
GetLastError
GetSystemTime
ReadFile
LoadLibraryExW
LoadLibraryA
LoadLibraryExA
CreateFileA
CreateProcessA
WaitForSingleObject
DeviceIoControl
ReleaseMutex
SleepEx
winmm
waveOutWrite
waveOutWrite
waveOutWrite
waveInClose
waveOutReset
DriverCallback
PlaySoundW
waveOutOpen
waveOutOpen
timeGetTime
PlaySoundW
PlaySoundW
timeGetTime
DriverCallback
timeGetTime
Sections
.text Size: 155KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ