Static task
static1
Behavioral task
behavioral1
Sample
1bfb79df9470efc76854af060f2c7112_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1bfb79df9470efc76854af060f2c7112_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1bfb79df9470efc76854af060f2c7112_JaffaCakes118
-
Size
57KB
-
MD5
1bfb79df9470efc76854af060f2c7112
-
SHA1
d2deb8b2e6a7f17853480c8524d7b83a3d558136
-
SHA256
6c45ec4192ae68ed64b42996486d51b727a2dfac942180a1cb46231cf0ce7851
-
SHA512
5631a566c69fe32551f98717a29a27864625a2effc5407a8e33064d4d47b2514a921741659e8081f0666666d3b167da10e33ed8d45d3b8b7049d79041c7e4ead
-
SSDEEP
768:xfyoAyvEFRXRRRRRRRDl15HUO8KCsaXa/l7FOn1/uIqR1uF/0e+0f:xfBAyvKpl1iOnCsoafOn1G1RQ0h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bfb79df9470efc76854af060f2c7112_JaffaCakes118
Files
-
1bfb79df9470efc76854af060f2c7112_JaffaCakes118.exe windows:4 windows x86 arch:x86
895b8a985ef46d0b906df6c7193b1778
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
GetCurrentProcess
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetLastError
SetConsoleCtrlHandler
GetCommandLineA
GetVersion
CloseHandle
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
HeapCreate
UnhandledExceptionFilter
RtlUnwind
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
SetPriorityClass
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
WriteFile
SetStdHandle
FlushFileBuffers
CreateFileA
ReadFile
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
SetFilePointer
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 991B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 684KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ