Static task
static1
Behavioral task
behavioral1
Sample
15df78cf557ef4ec19af29c7cdc85305_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15df78cf557ef4ec19af29c7cdc85305_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15df78cf557ef4ec19af29c7cdc85305_JaffaCakes118
-
Size
56KB
-
MD5
15df78cf557ef4ec19af29c7cdc85305
-
SHA1
59678200d38199862106ec6da4fd7c3644a243fe
-
SHA256
946af3c8584391cbf41dab70468b63ddc6b575535019f1e8b085df6d03cd4933
-
SHA512
664546572c63ccbdb1b07c7003276d1b67af08fbd96d5da3b3bbc53f8776d72465857bb8a95f82837ef02d17095a4d26fd3696baea275ab43ff7513889c4e686
-
SSDEEP
768:xWmZp9hZBDEhKqS2BRtQMV7JvHWxXSirF/V4u9gcDVT:MmZp7ZBDE2IQMV7FH0CylgcZT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15df78cf557ef4ec19af29c7cdc85305_JaffaCakes118
Files
-
15df78cf557ef4ec19af29c7cdc85305_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e2c52d5b60360acfd8c733230eacb49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
ExitProcess
GetLastError
CloseHandle
ReadFile
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
WriteFile
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
HeapFree
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
SetStdHandle
FlushFileBuffers
CreateFileA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE