Static task
static1
Behavioral task
behavioral1
Sample
0722ddef1de32c61fce67cba0fffbd40_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0722ddef1de32c61fce67cba0fffbd40_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0722ddef1de32c61fce67cba0fffbd40_JaffaCakes118
-
Size
98KB
-
MD5
0722ddef1de32c61fce67cba0fffbd40
-
SHA1
c4c04f45242f2d9e6090eb0773ab31e1f28fa1d4
-
SHA256
a53d30bc26712eab4f9b351ee527b37ea5733f4e590b8e52e59090c84d450ec7
-
SHA512
58589a6fe41ccce6fe479ccedd5d831c150b4d2fd7ad0114f74843395a7ceb629135d64254e0e2c86404ef90fd51145dce8071d2b35e57ee3594bf652e9d2b81
-
SSDEEP
1536:IAf9qWr1v6WLJ75tGyilVpiyvuSXwaoD1g80xBjHkEGn9OZ+wIS3/dVA1JO4EE:IAf93NGyilieAnD280bVGn9OEwBiEE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0722ddef1de32c61fce67cba0fffbd40_JaffaCakes118
Files
-
0722ddef1de32c61fce67cba0fffbd40_JaffaCakes118.exe windows:4 windows x86 arch:x86
bf020afffb0169705d5c7726e8345b67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
GetLastError
SetLastError
GetCurrentThreadId
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
mscoree
_CorExeMain
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ