Static task
static1
Behavioral task
behavioral1
Sample
2862409cf8e077d168f28b4bba93aba7_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2862409cf8e077d168f28b4bba93aba7_JaffaCakes118
-
Size
132KB
-
MD5
2862409cf8e077d168f28b4bba93aba7
-
SHA1
962d2f8629331c9832f002c2a72cfdee1ee86881
-
SHA256
103c6bb827c232fcf350b79cc12db2371691f28fa3d3a1330c56846da4f193ea
-
SHA512
6e58d77fecd362f7c127f918c55d2307602e483eb14889314d790287acb2e449648e7d1c3d676c4292c56ba4375372dd2fc5e9e4c2fbbfb888b9f393ff52ad75
-
SSDEEP
1536:HTsLgM8FUjsBWJO1kZgVRB6aS2Alfae9TSfEicxpGiw7Mo8W3nrLRy1zRjzvYxlB:5qIBWJcRB61RlfHdSfuxM8kGR3SlB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2862409cf8e077d168f28b4bba93aba7_JaffaCakes118
Files
-
2862409cf8e077d168f28b4bba93aba7_JaffaCakes118.exe windows:4 windows x86 arch:x86
9cfe2ba8151c1b0acd32a04e0babedb5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringA
LCMapStringW
GetVersionExA
GetStringTypeW
WritePrivateProfileStringA
RtlUnwind
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
Sleep
HeapSize
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
winspool.drv
DeletePrinter
ClosePrinter
DeletePortA
DeletePrinterDriverExA
DeleteMonitorA
OpenPrinterA
advapi32
RegDeleteKeyA
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE