Static task
static1
Behavioral task
behavioral1
Sample
219b0e5a3aa569533d45c20346846f25_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
219b0e5a3aa569533d45c20346846f25_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
219b0e5a3aa569533d45c20346846f25_JaffaCakes118
-
Size
60KB
-
MD5
219b0e5a3aa569533d45c20346846f25
-
SHA1
8c677001746a8f1f3befc4dd23fdc8032590071a
-
SHA256
49a8fee82735df087c34d7c65d1226f7af54dd3ff61c9f05619bc86453c65c33
-
SHA512
ce3d56f4e6480c64789e0835d7769786e35cd24d2666582ab7854ebbf270a97dce2ebc904753bd1ad1826dbbf0791e4852464960832411cbe1c692931187e864
-
SSDEEP
1536:R80nSmjY4JLIeMRJ7/CxPA+4eq2Ti4Ts:BSmjvJIVRJ76xPA+Te4Ts
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 219b0e5a3aa569533d45c20346846f25_JaffaCakes118
Files
-
219b0e5a3aa569533d45c20346846f25_JaffaCakes118.exe windows:4 windows x86 arch:x86
2b3e2e0242dbcbf489b6035511630e6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
SetEndOfFile
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
CreateFileA
CompareStringW
CompareStringA
InterlockedExchange
HeapSize
RtlUnwind
InitializeCriticalSection
SetFilePointer
VirtualQuery
GetSystemInfo
VirtualProtect
VirtualAlloc
SetStdHandle
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCPInfo
UnhandledExceptionFilter
SetEnvironmentVariableW
SetEnvironmentVariableA
FlushFileBuffers
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
ReadFile
FileTimeToSystemTime
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
WideCharToMultiByte
DeleteCriticalSection
HeapFree
HeapReAlloc
HeapAlloc
GetVersionExA
CreateThread
GetCurrentThreadId
ExitThread
GetFileAttributesA
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
TerminateProcess
GetModuleHandleA
ExitProcess
FindClose
FindNextFileA
FindFirstFileA
GetExitCodeThread
LoadLibraryA
GetProcAddress
FreeLibrary
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetLastError
FormatMessageA
LocalFree
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleFileNameA
GetProcessHeap
GetCurrencyFormatA
OutputDebugStringA
FileTimeToLocalFileTime
GetDriveTypeA
GetFullPathNameA
WriteFile
GetCurrentDirectoryA
advapi32
RegOpenKeyExA
RegEnumKeyA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 534B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ