Static task
static1
Behavioral task
behavioral1
Sample
2832be6341369de7a19026638a8eefbc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2832be6341369de7a19026638a8eefbc_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2832be6341369de7a19026638a8eefbc_JaffaCakes118
-
Size
60KB
-
MD5
2832be6341369de7a19026638a8eefbc
-
SHA1
edc3208b34fe51233e8bd4f15bae83ee4b1167be
-
SHA256
929e95573c35e9f0ccd190784b7ea9e0fe3bff5058b26ac5f8ff2933c597209b
-
SHA512
9c1d14479f4a107d8a55058b2b47db1046bfbabbfb7d48197a074e771ca95d0d8fc2955624fe11e5acec2c359c9fb2ae157b4ffb8c0c2465b61730c35ceff15e
-
SSDEEP
768:QOSpAZzo5ewRCAS4sIstteec0dGq4TvBfnuAuD3yBPFpU1t2:QObZz3rlyejGq49fuDD3est2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2832be6341369de7a19026638a8eefbc_JaffaCakes118
Files
-
2832be6341369de7a19026638a8eefbc_JaffaCakes118.exe windows:4 windows x86 arch:x86
a4c3943dad80eabdacff5ca356841a38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
CreateProcessA
DeleteFileA
Sleep
GetSystemTime
Process32Next
GetCurrentProcessId
OpenProcess
Process32First
CreateToolhelp32Snapshot
ExitProcess
GetWindowsDirectoryA
GetModuleFileNameA
CreateThread
CopyFileA
CreateDirectoryA
GetSystemDirectoryA
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
CreateFileA
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableA
HeapReAlloc
GetTimeZoneInformation
GetLocalTime
GetCommandLineA
GetVersion
HeapFree
GetLastError
WriteFile
ReadFile
TerminateProcess
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
user32
FindWindowExA
GetWindowTextA
wsprintfA
shell32
ShellExecuteA
winmm
timeGetTime
ws2_32
gethostname
WSAStartup
gethostbyname
inet_ntoa
rpcrt4
UuidCreateSequential
psapi
GetModuleFileNameExA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE