tyrij
Static task
static1
Behavioral task
behavioral1
Sample
7d67727677c531db74f356d4f60d5338_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7d67727677c531db74f356d4f60d5338_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
7d67727677c531db74f356d4f60d5338_JaffaCakes118
-
Size
84KB
-
MD5
7d67727677c531db74f356d4f60d5338
-
SHA1
4007341deafcf3c9a0d5d296e513a7f2c2dcbbdf
-
SHA256
38ad20c78abaabe09f0cf26b586d710c9268868af1c02b4a8d242baee1887ba3
-
SHA512
1495b703d1da2c13745c41e147bfecfa006c2429823c6b3ef96ed297e66337b3b937006d4500c93bb02f5f182c0494d07815d0e2fdb8ca22ad067a33d6905813
-
SSDEEP
1536:Z5xObo7fgZPIsCeqYwck//VNXDvRtrfkWDaO9CoFCzYGr5:ZvOboRs9mf9NXDvRtrfCOU2CzY4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d67727677c531db74f356d4f60d5338_JaffaCakes118
Files
-
7d67727677c531db74f356d4f60d5338_JaffaCakes118.exe windows:4 windows x86 arch:x86
c38e0b21312c969ee732325de81d04aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
FreeLibrary
lstrcpyA
CloseHandle
ReadFile
GetFileSize
CreateFileA
DeleteFileA
GetFileAttributesA
RtlUnwind
RaiseException
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TlsAlloc
SetLastError
GetCurrentThreadId
GetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
IsBadWritePtr
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
InitializeCriticalSection
InterlockedExchange
VirtualQuery
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
GetSystemInfo
Exports
Exports
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE