SPACE
Static task
static1
Behavioral task
behavioral1
Sample
7a0e087457d980d162024a5e32459e19_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
7a0e087457d980d162024a5e32459e19_JaffaCakes118
-
Size
288KB
-
MD5
7a0e087457d980d162024a5e32459e19
-
SHA1
1ee1cbca019e229b6e8510ed94599b6a00141a68
-
SHA256
dcc946703ce41e5a57cd88a56fe21ef93f8744e949c1e0e31a7aece0c6fa8d82
-
SHA512
7cfab9a3f7c0cea95520f2e72388fe1178f9d9810c70b64946ad04d7cbcf6de36b23de9ad66fd3f384defde7ead71a2093dce9486d2e4be6b3651a2ecbfe3557
-
SSDEEP
6144:0g1II1jYKhQohD964mxpP5PYR0IZKj4qEV:phYK2e9644YR0xk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a0e087457d980d162024a5e32459e19_JaffaCakes118
Files
-
7a0e087457d980d162024a5e32459e19_JaffaCakes118.exe windows:4 windows x86 arch:x86
d1bea546319df4f4529dd91864ae95b9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
CloseHandle
WriteFile
CreateFileA
OutputDebugStringA
HeapReAlloc
RtlUnwind
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
IsBadWritePtr
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
GetLastError
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsBadCodePtr
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
SetConsoleCtrlHandler
SetFilePointer
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Exports
Exports
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 212KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ