Static task
static1
Behavioral task
behavioral1
Sample
0358b6ac3d5dc0773f2f85b386e542e0_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
0358b6ac3d5dc0773f2f85b386e542e0_JaffaCakes118
-
Size
814KB
-
MD5
0358b6ac3d5dc0773f2f85b386e542e0
-
SHA1
f7a0d98afb4b03a68f04d0f85426c7b8f207f5f0
-
SHA256
43136fbeee508a4f4685eb398cbe6d1b776d62e7f162c5ac92cf2fbe2d083df5
-
SHA512
aea063259673f08f9f86a88a922ed486db4322c921e22f1f6945626f4f341397adfbcaaa8dcfbff9e11a5893f648b7eff6254d69a1e172a4d53d7348d8b2d00d
-
SSDEEP
24576:SbtnrlFg0qPMnnDdBZotvcl0sM2Cq5mAE0zSJb:G/gMDqtAE0mh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0358b6ac3d5dc0773f2f85b386e542e0_JaffaCakes118
Files
-
0358b6ac3d5dc0773f2f85b386e542e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
5540747e9b23757e39b0a6eae65b3208
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
HeapReAlloc
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
FlushFileBuffers
LCMapStringA
LCMapStringW
SetStdHandle
CloseHandle
shell32
ShellExecuteA
Sections
.text Size: 486KB - Virtual size: 486KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 285KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ