Static task
static1
Behavioral task
behavioral1
Sample
2258e753cfa6222f19dec5eefa5d7530_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2258e753cfa6222f19dec5eefa5d7530_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2258e753cfa6222f19dec5eefa5d7530_JaffaCakes118
-
Size
316KB
-
MD5
2258e753cfa6222f19dec5eefa5d7530
-
SHA1
99957c9d5cdf9e057bfecdfdd3e0c0e275526602
-
SHA256
5a7f4b3da2d4ce2ad17cea8ca043324baf3134f14c55f9322ad0c3b0cc401e7c
-
SHA512
9987ff15aee2be4695dd322ccafdf45d2ce93cf3c0e6831003481ab0caba41c7812cfa97a66e565a26428104c02b201a803d70a2ea4d7fbf075d41c967deae73
-
SSDEEP
6144:w8xZYufH2VkT1eky/vOep5IOrMdjVgtTP/KE6l:w6jP2+XYDIOAxVD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2258e753cfa6222f19dec5eefa5d7530_JaffaCakes118
Files
-
2258e753cfa6222f19dec5eefa5d7530_JaffaCakes118.exe windows:4 windows x86 arch:x86
e71484d26a6416eed5b0364673ea508c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
SetErrorMode
SetConsoleCtrlHandler
SetLastError
GetCommandLineA
RaiseException
GetFileType
GetLastError
SetFilePointer
VirtualAlloc
VirtualFree
CloseHandle
GetStdHandle
FormatMessageA
DebugBreak
FreeLibrary
GetCurrentThread
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetModuleFileNameA
VirtualQuery
MapViewOfFile
CreateFileMappingA
CreateFileA
GetModuleHandleA
ReadFile
SetEndOfFile
GetTempFileNameA
GetTempPathA
GetFullPathNameA
GetFileInformationByHandle
WriteFile
DeleteFileA
WaitForSingleObject
GetVersionExA
SetThreadPriority
CreateProcessA
Sleep
GetVersion
ExitProcess
TerminateProcess
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
IsBadWritePtr
GetCPInfo
GetOEMCP
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
SetStdHandle
Sections
.text Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trace Size: 4KB - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ