Static task
static1
Behavioral task
behavioral1
Sample
9d7c4ddac019a7ad038faa2d5aa163de_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9d7c4ddac019a7ad038faa2d5aa163de_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9d7c4ddac019a7ad038faa2d5aa163de_JaffaCakes118
-
Size
828KB
-
MD5
9d7c4ddac019a7ad038faa2d5aa163de
-
SHA1
57179c83e2c1bdf9d8dce94df943cb9a5cf56fcc
-
SHA256
ff42f7a79dc09bf16e4e7080facedf14f67f9557aa602027d43a3ce2da0b4a14
-
SHA512
e70912d1f7028bc6a0006f2ae6f84b4311653489c975bc4538b3cc786ea007c962a922d58ff79ce6dc311884fe6819a9747384031ac46815d0a48f1a427df4ff
-
SSDEEP
12288:EMgjbulAofkRVe1SGWDc+37ot6hbgqDY+r+Xedhqh4eo:020e1SGWDcWCWUXjhq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d7c4ddac019a7ad038faa2d5aa163de_JaffaCakes118
Files
-
9d7c4ddac019a7ad038faa2d5aa163de_JaffaCakes118.exe windows:4 windows x86 arch:x86
01483343bf23c73bc08a27a54afb1697
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadPriority
VirtualAlloc
ResumeThread
SetEvent
FreeLibrary
OpenFileMappingA
GetFileSize
GetExitCodeThread
CloseHandle
SuspendThread
Sleep
OpenEventW
LoadLibraryA
CreateMutexA
SetFileAttributesA
SetFileAttributesW
GetFileAttributesA
TerminateProcess
CreateDirectoryW
GetTickCount
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetProcAddress
GetOEMCP
GetACP
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetStringTypeW
user32
WaitForInputIdle
CreateDesktopW
IsChild
ShowWindow
GetSysColorBrush
SendMessageA
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code Size: 4KB - Virtual size: 117B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 732KB - Virtual size: 731KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ