Static task
static1
Behavioral task
behavioral1
Sample
22c563596d582d55d4f429f10bc0975e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22c563596d582d55d4f429f10bc0975e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
22c563596d582d55d4f429f10bc0975e_JaffaCakes118
-
Size
242KB
-
MD5
22c563596d582d55d4f429f10bc0975e
-
SHA1
714fa90028c90716a630365b0b06aaaa1d92825c
-
SHA256
aa2cc1455d0d9590824c58f22a34c8d6c62f602a330fd6b046af0bc4b0ee2456
-
SHA512
863ab963ee526e94085dc4addc24377a6a3fe533c393569ce9b768647152e640b859e9106e9088362c6b20e559cb82aac95038b818755f69a0e1f053179b1cc9
-
SSDEEP
3072:7xlYsnEcGKWqZqje6pVtlCia5NZVYLZhpm0JJB1aLMu1ke+:7zEclQTBiVYL9m0vB1Iy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22c563596d582d55d4f429f10bc0975e_JaffaCakes118
Files
-
22c563596d582d55d4f429f10bc0975e_JaffaCakes118.exe windows:4 windows x86 arch:x86
df74c8f289e675a5632bbbb73ae73946
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
LoadResource
FindResourceA
WinExec
GetTempPathA
GlobalAlloc
GetProcAddress
GetModuleHandleA
HeapFree
ReadFile
CreateFileA
GetProcessHeap
GetFileInformationByHandle
GetSystemDirectoryA
DuplicateHandle
GetCurrentProcess
LoadLibraryA
LocalFree
IsBadReadPtr
GetVersionExA
SizeofResource
WriteFile
CloseHandle
HeapAlloc
FreeResource
ExitProcess
TerminateProcess
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
advapi32
GetUserNameA
SetEntriesInAclA
SetSecurityInfo
GetSecurityInfo
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 223KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ