Static task
static1
Behavioral task
behavioral1
Sample
211a4beab5bebbdf64e5140011d45407_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
211a4beab5bebbdf64e5140011d45407_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
211a4beab5bebbdf64e5140011d45407_JaffaCakes118
-
Size
125KB
-
MD5
211a4beab5bebbdf64e5140011d45407
-
SHA1
42a3e9f311e9b9dc9bfee3acd774b7186256e8fa
-
SHA256
47be1fcf9532303a4f48132ab03baa958497ac3f55f38342f8a5f00306b1aa48
-
SHA512
90e3c8c341aabf4c6c1b16cb50aa6715bdf38d3238494868512fafe28736093dd7417ab22f606245df73ebedb171564fa8bc1060c44118b97d0dff1dd58f85ab
-
SSDEEP
1536:RQ4JTG2rlgilJfcT5hEDdHzvKMPHu9F6PSpByt7kch0:RQ4Tl6ipQhaHDKMPHu94PkByt7Bh0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 211a4beab5bebbdf64e5140011d45407_JaffaCakes118
Files
-
211a4beab5bebbdf64e5140011d45407_JaffaCakes118.exe windows:1 windows x86 arch:x86
6fc7d662a4b407051985ae21be18148c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
lstrcpyA
FindClose
ReadFile
GlobalAlloc
CreateFileA
SetFilePointer
CloseHandle
MultiByteToWideChar
GetModuleFileNameA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GlobalFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
GetLastError
DeleteFileA
WriteFile
GetLocalTime
GetTimeZoneInformation
msvcrt
_mbsrchr
_mbschr
oleaut32
SysAllocString
SysAllocStringByteLen
user32
wsprintfA
MessageBoxA
ole32
OleInitialize
CLSIDFromProgID
CoCreateInstance
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 365B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.exc Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ