Static task
static1
Behavioral task
behavioral1
Sample
7754480cc3b682654a4f308a3e52e85e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7754480cc3b682654a4f308a3e52e85e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
7754480cc3b682654a4f308a3e52e85e_JaffaCakes118
-
Size
456KB
-
MD5
7754480cc3b682654a4f308a3e52e85e
-
SHA1
0d74e814ee7dbbc89bd1b7a9b89d2227ed3a0334
-
SHA256
d73edb11c1597d9dc64545f079c230911e5505489e68aa1575153430b273a18d
-
SHA512
ca63723516ed053f1e88a32f0141697435a468b27cacd2fa86af3ed2ef54cf4ed7e6ab65e5959a5f544a2536a34940aea77abfa3a34db80c0ae6a610ba47ac45
-
SSDEEP
12288:WrnGiEfgZaBdxhNiucVJGTOdqFL6LZkrcWkbl:knGimSAbqvQF2eQ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7754480cc3b682654a4f308a3e52e85e_JaffaCakes118
Files
-
7754480cc3b682654a4f308a3e52e85e_JaffaCakes118.exe windows:4 windows x86 arch:x86
3bd8b16ff77af36adb0d001edf1c9687
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MonitorFromWindow
InSendMessage
kernel32
GetCurrentThreadId
HeapSize
VirtualAlloc
WideCharToMultiByte
GetEnvironmentStrings
DeleteFileA
UnmapViewOfFile
RaiseException
FreeEnvironmentStringsA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
DeleteCriticalSection
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetFilePointer
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
CompareStringA
CompareStringW
SetEnvironmentVariableA
LoadLibraryA
HeapReAlloc
CreateFileA
CloseHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 380KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ