Static task
static1
Behavioral task
behavioral1
Sample
a3e6b5b55dbc1b973e4c2169a7148a29_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a3e6b5b55dbc1b973e4c2169a7148a29_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a3e6b5b55dbc1b973e4c2169a7148a29_JaffaCakes118
-
Size
43KB
-
MD5
a3e6b5b55dbc1b973e4c2169a7148a29
-
SHA1
9ca1ad4c1591a9362f15cd39a54e3e6beb7c2290
-
SHA256
1aded78346fec3589b1d561422c0930e5d111e484b18a11cbc81d8d5f3afcf1d
-
SHA512
49c24c1a08c2413a164552d003078ba53d63ab58c58c5aeedc64a39f2c452ac266fd6713f8ba7e2544568ed2c8ab93de55bfae510bb0deee77c6148c290451cc
-
SSDEEP
768:u+dcsmYZICOAweJIEWuIK9SvK87GonvjwIr/+W9Mg/:ugc0ZICOAw0IBM9SLrwIKW9Mg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3e6b5b55dbc1b973e4c2169a7148a29_JaffaCakes118
Files
-
a3e6b5b55dbc1b973e4c2169a7148a29_JaffaCakes118.exe windows:1 windows x86 arch:x86
744e244d0de569ddc971ec7043f4558d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharUpperA
shlwapi
PathRemoveExtensionA
kernel32
CloseHandle
CreateEventA
CreateFileA
ExitProcess
FlushFileBuffers
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetEnvironmentStringsA
GetFileSize
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
ReadFile
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetEnvironmentVariableW
SetFilePointer
SetStdHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
lstrcatA
lstrcpyA
Sections
AUTO Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DGROUP Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ