Static task
static1
Behavioral task
behavioral1
Sample
08248dd1e494f0cd7370067f430b3492_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
08248dd1e494f0cd7370067f430b3492_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
08248dd1e494f0cd7370067f430b3492_JaffaCakes118
-
Size
1022KB
-
MD5
08248dd1e494f0cd7370067f430b3492
-
SHA1
24bc11b2b5c751865e5df62d2e3510d9259da6c0
-
SHA256
1fe3d90302b18486ef15c9d03efb0c117eb8fc5022856f4658a766894c42fd93
-
SHA512
2a4f0d19c7aa0fa310a0ab5c7aa39a226c7b35156d93df65a62ac6ef716fd7294df79a80cb0082438afd1705812ecc155c2a9a1578fe41e06683fafadcdd21fc
-
SSDEEP
24576:+vsdV/4DVES7r/7UVgcmmL7HYFTI39kYAW1eM6shn:+v84Zl/7UVRmWmakeQMr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08248dd1e494f0cd7370067f430b3492_JaffaCakes118
Files
-
08248dd1e494f0cd7370067f430b3492_JaffaCakes118.exe windows:4 windows x86 arch:x86
9165ea3e914e03bda3346f13edbd6ccd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
CreateDirectoryA
GetTempPathA
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW
user32
MessageBoxA
wsprintfA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ