Static task
static1
Behavioral task
behavioral1
Sample
19f3f565987d63aa31e4185ad49eeef5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
19f3f565987d63aa31e4185ad49eeef5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
19f3f565987d63aa31e4185ad49eeef5_JaffaCakes118
-
Size
464KB
-
MD5
19f3f565987d63aa31e4185ad49eeef5
-
SHA1
46c02a00920adc9803f5a64bd6349a706dbfa2c7
-
SHA256
4281955f38e16c5b8ced9b02c8c40092823f6c771555c3dd76c1909c0776028c
-
SHA512
960bf37ee8d25062c72547905abdb782a46235889516c1092f2e7562a2131ff3eefb740be857ba7b79f9b7dd19967a2f94b84fccf28927f66c9eed79fa000c49
-
SSDEEP
12288:TZzn5Kzhk3PzedpkkEW+sC0tMGil/X3KKlwGZMkHQ0rzTLnz:Td5Ak3PcCCaxX5lwGGkHHTX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19f3f565987d63aa31e4185ad49eeef5_JaffaCakes118
Files
-
19f3f565987d63aa31e4185ad49eeef5_JaffaCakes118.exe windows:4 windows x86 arch:x86
c52309033bc68bc64b64ae57b8e31280
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
VirtualAlloc
FindClose
GlobalAlloc
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
CloseHandle
FindNextFileW
SetFilePointer
GetStringTypeA
RaiseException
GetProcAddress
MultiByteToWideChar
SetErrorMode
UnhandledExceptionFilter
GetEnvironmentStrings
GetCurrentProcess
GetModuleFileNameA
GlobalUnlock
GetEnvironmentStringsW
GetTickCount
HeapDestroy
QueryPerformanceCounter
GetOEMCP
WaitForSingleObject
GlobalFree
GetConsoleOutputCP
HeapFree
GetLastError
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
RtlUnwind
WriteFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
LoadLibraryA
LCMapStringA
LCMapStringW
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ