Static task
static1
Behavioral task
behavioral1
Sample
02048780f19ace56db841a9ccfd7e7b3_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
02048780f19ace56db841a9ccfd7e7b3_JaffaCakes118
-
Size
1.2MB
-
MD5
02048780f19ace56db841a9ccfd7e7b3
-
SHA1
63de4bb86f3328c0f3e448f8f7db6da3b6d09477
-
SHA256
18c62801fb85d9e3bbb89cf77bf1f41d4a9da5c19fda35edb33eb6e16aad6cea
-
SHA512
e0cf0537e3ca7bda0582e9c3e51f57e3a5f7bcab7d7975f33afa5296a1344557bc9cbaba224764663ca0e795b725bc5b188ad31f9f8694694855c28316c3f364
-
SSDEEP
24576:qh12IKEsLQIJv/j/uf8dPKZMdBltSkhmQU4zWiMuFCS0hOMed+3l6cj:qhpxtIdruEEMlVznMnvhOEcy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02048780f19ace56db841a9ccfd7e7b3_JaffaCakes118
Files
-
02048780f19ace56db841a9ccfd7e7b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
fe4bdec14e349d908078b20b90cebc9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32 kernel32
HeapAlloc �a
kernel32
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
ExitProcess
GetFileAttributesA
GetWindowsDirectoryA
GetVersionExA
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
iphlpapi
GetAdaptersInfo
user32
GetWindow
shell32
SHGetFolderPathA
Sections
.text Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 960KB - Virtual size: 960KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ