Static task
static1
Behavioral task
behavioral1
Sample
1b851bb23578033c79b8b15313b9c382_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b851bb23578033c79b8b15313b9c382_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b851bb23578033c79b8b15313b9c382_JaffaCakes118
-
Size
56KB
-
MD5
1b851bb23578033c79b8b15313b9c382
-
SHA1
88ea51a489ff6bf7b064100d31c222d669fca05b
-
SHA256
ff0ceb9b926818a34408fa8d1b53ac6f1e068d034df5905a01bfa667fa14f527
-
SHA512
ab13a21ebdb0fe00a251d58305466a59c6d62bc89018f27effb1009e2080a0e51c449820aaf41cbacb262da2fe426578774f976e655583cddaf22f2231652a98
-
SSDEEP
768:JOKJ/3GFVWB+xOLa49Vfl5pXlTgLa1KoBQoQdO5uxF:Jht+gayV9PuLaSo6nx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b851bb23578033c79b8b15313b9c382_JaffaCakes118
Files
-
1b851bb23578033c79b8b15313b9c382_JaffaCakes118.exe windows:4 windows x86 arch:x86
49c999184f2b55f64cbc6b6e77611316
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
GetLastError
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE