Static task
static1
Behavioral task
behavioral1
Sample
08aca5ee95492f388be8cd0843fb574d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08aca5ee95492f388be8cd0843fb574d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
08aca5ee95492f388be8cd0843fb574d_JaffaCakes118
-
Size
93KB
-
MD5
08aca5ee95492f388be8cd0843fb574d
-
SHA1
3e9b1fb7f684a4e97a770f7701ea42afbf8a30dc
-
SHA256
9ce54736386e9451c338973f6086d157859fea8c205dc4dc449ecca8b75b5c73
-
SHA512
05f0610c555cc8a1930d17c7c47a47fc29b52195d2019e2cacbfcb20e50b15038949f0b726f19869f0233401e60d87455f78618e82f9b16d35f72593d26b209c
-
SSDEEP
1536:CAih4EFrwBQ16Qm0cNjtHamlavjgENjXanclt:wmGfcFl4jRtac
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08aca5ee95492f388be8cd0843fb574d_JaffaCakes118
Files
-
08aca5ee95492f388be8cd0843fb574d_JaffaCakes118.exe windows:4 windows x86 arch:x86
a2d2fa29f218fae813dfc41da78fcd92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetLastError
Sleep
GetLocaleInfoA
GetStartupInfoA
VirtualAlloc
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gqkdpar Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE