Static task
static1
Behavioral task
behavioral1
Sample
16a63a858b075b0b6d3f6bb017bb0ae4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16a63a858b075b0b6d3f6bb017bb0ae4_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
16a63a858b075b0b6d3f6bb017bb0ae4_JaffaCakes118
-
Size
36KB
-
MD5
16a63a858b075b0b6d3f6bb017bb0ae4
-
SHA1
e2456e8e9f947e9751980c3b5f6050e81d51449f
-
SHA256
291e179c78f258a1316044167015e022a07349561ef0750aa9a1c96f7415f35e
-
SHA512
5969ce5a856c395945ad27ebabc66608b43314b2d427d134741e09bd65a9bab479c68844ef01517f5278194d1e46a87ab13c657679d45f391bd1d4710949137d
-
SSDEEP
384:cHP1qaBKxCd7PpLjzKb29lKDYyKsez8/t3:cHPdBKYXx48zso8/t3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16a63a858b075b0b6d3f6bb017bb0ae4_JaffaCakes118
Files
-
16a63a858b075b0b6d3f6bb017bb0ae4_JaffaCakes118.exe windows:4 windows x86 arch:x86
92325b10973e6df5b26696b7ef54ae1e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sleep
GetVersionExA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
GetStringTypeW
user32
wsprintfA
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE