Static task
static1
Behavioral task
behavioral1
Sample
5f27bfba485fef2e6eb887bfa4542d72_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
5f27bfba485fef2e6eb887bfa4542d72_JaffaCakes118
-
Size
1.0MB
-
MD5
5f27bfba485fef2e6eb887bfa4542d72
-
SHA1
7cf2b8714a6137a3963f53791fe768f2164e9a2e
-
SHA256
f8986f8d3f396d966bec6bec59f9f926ed901134ebb1332eefb819c3dfa5c712
-
SHA512
d0b12fbb152dba7e2fafc36653d9967fe82e2e7cdecc7cb282bbb2743410d6e849b63b103b944bf59f887e811366e0c68aca7f520127dd65824d96ad790192a8
-
SSDEEP
12288:FTKFbfEScSXLQCxfGMDE2feZc2XcPln+cg9NR9Egy3PCIWOLLj4tvXUhEJSQMbGe:pK8Ctgy8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f27bfba485fef2e6eb887bfa4542d72_JaffaCakes118
Files
-
5f27bfba485fef2e6eb887bfa4542d72_JaffaCakes118.exe windows:4 windows x86 arch:x86
bb34397d2da0742c871325330cab9be8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
GetCurrentDirectoryA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
Sleep
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
RaiseException
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
SetUnhandledExceptionFilter
SetFilePointer
FlushFileBuffers
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadCodePtr
SetStdHandle
ReadFile
GetACP
GetOEMCP
GetLocaleInfoW
SetEndOfFile
SetEnvironmentVariableA
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 864KB - Virtual size: 861KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ