Static task
static1
Behavioral task
behavioral1
Sample
07c47fd163622ab471be4f4b4f22d48e_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07c47fd163622ab471be4f4b4f22d48e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
07c47fd163622ab471be4f4b4f22d48e_JaffaCakes118
-
Size
110KB
-
MD5
07c47fd163622ab471be4f4b4f22d48e
-
SHA1
32cefdb6e2baf97b9c6ca54f61613b2a2763cb7b
-
SHA256
b036da629ec729ac74bc712b4b0c9b0e88e4369c0643fe92489e4a68401ab5c2
-
SHA512
09af4f5a6d6f2a613b5ceb019ddea1a4821d0c0e280cc081a26a898cf363f484131efa7bee54f8ef52873706ed37cb37c82dacb95f9dff510aa5df827a91f828
-
SSDEEP
3072:p7DDwOGhi6w8iwC4oRxndXutXFTBf2+xxJPy9:ZoOGYL8iwQCTB++09
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07c47fd163622ab471be4f4b4f22d48e_JaffaCakes118
Files
-
07c47fd163622ab471be4f4b4f22d48e_JaffaCakes118.exe windows:4 windows x86 arch:x86
4b092b32bde15a04dc0e92ef77473377
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetCommandLineA
Sleep
SetEvent
LoadLibraryA
GlobalMemoryStatus
GlobalFree
GlobalAlloc
GetVersionExA
GetTickCount
GetProcAddress
GetModuleHandleA
GetLastError
GetCurrentProcessId
GetCurrentDirectoryA
ExitThread
WaitForSingleObject
VirtualFree
FreeLibrary
GetSystemTimeAsFileTime
GetLocalTime
SystemTimeToFileTime
GetSystemTime
CloseHandle
HeapCompact
ExitProcess
DeleteFileA
CreateThread
CreateMutexA
CreateFileA
CreateEventA
CopyFileA
VirtualAlloc
HeapAlloc
HeapCreate
HeapFree
HeapDestroy
msvcrt
calloc
malloc
_errno
printf
strcpy
sprintf
isdigit
atoi
strftime
_tzset
strcat
memcpy
memcmp
_snprintf
strncat
strstr
strlen
memmove
free
_except_handler3
memset
_time64
_localtime64
_gmtime64
sqrt
advapi32
CryptAcquireContextA
CryptImportKey
CryptSetKeyParam
CryptDecrypt
CryptEncrypt
CryptDestroyKey
CryptReleaseContext
user32
DrawTextA
GetDC
gdi32
GdiFlush
SetBkMode
SetTextColor
CreateFontA
Ellipse
LineTo
MoveToEx
DeleteObject
Rectangle
CreateHatchBrush
SetDIBColorTable
SelectObject
CreateDIBSection
CreateCompatibleDC
Sections
.text Size: 70KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE