Static task
static1
Behavioral task
behavioral1
Sample
1819726eeb40702e5b11518722595568_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1819726eeb40702e5b11518722595568_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1819726eeb40702e5b11518722595568_JaffaCakes118
-
Size
40KB
-
MD5
1819726eeb40702e5b11518722595568
-
SHA1
5ccec2b3a52f7ebb2009e6e216fed69dda96ab0f
-
SHA256
50490ac8cfba5ac9ba4a0d36c78064fad7880905dbbd876494768a80548cc55b
-
SHA512
ea0fd43298770a89f86477a551216dcbd1a5826e010595cdb7920074ae1ea6ad5fac308c792600ce342e2e1c04f0a8c00a9dd1bbb364b1894f1a5bc3a034d995
-
SSDEEP
384:ejpJgB99aBkLPgUfn9skW5d00ZUDSdXaXS5yNbN0siG1ACSTyv6n1V7zkL1aAC64:ejv+UOLoS9dW3JM2G1/sH9zuM6lA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1819726eeb40702e5b11518722595568_JaffaCakes118
Files
-
1819726eeb40702e5b11518722595568_JaffaCakes118.exe windows:4 windows x86 arch:x86
b77587e040c53d01119118908a682a84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadPriority
CreateProcessA
CloseHandle
WriteFile
lstrlenA
lstrcpyA
GetModuleFileNameA
CreateFileA
GetLastError
GetCommandLineA
GetCurrentThread
WideCharToMultiByte
GetVersionExA
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
GetCurrentProcess
SetPriorityClass
ResumeThread
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
SetFilePointer
MultiByteToWideChar
user32
wsprintfA
wininet
InternetQueryDataAvailable
InternetCloseHandle
InternetOpenA
InternetReadFile
InternetOpenUrlA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE