Static task
static1
Behavioral task
behavioral1
Sample
29657d950b9c71203edcbdeaa0b8d03b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29657d950b9c71203edcbdeaa0b8d03b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29657d950b9c71203edcbdeaa0b8d03b_JaffaCakes118
-
Size
68KB
-
MD5
29657d950b9c71203edcbdeaa0b8d03b
-
SHA1
83b08cec7ab50ab1a018ca21654ec63d90c8553b
-
SHA256
c055cbd2fc34f900aba3fb759d718035b5031ba03cf455c7d83b7b2ef096e9f4
-
SHA512
12c05abf805bc2ff93c4994d227d79b74513616d2034a8484fb289ae9f02680e5288da5dc711cde346d705b59b0967604a4edc00bfbba35db7548cf45fded5e0
-
SSDEEP
1536:9yGyx2QgpK9yjiepYgqwdBFf3bEHk4IY9FKtmeQ:9O2Qj8tzm4tmL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29657d950b9c71203edcbdeaa0b8d03b_JaffaCakes118
Files
-
29657d950b9c71203edcbdeaa0b8d03b_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e52a9df6085bd84e1b63fcf16308e98
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
CreateFileA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapSize
GetOEMCP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
Sleep
GetLocaleInfoA
GetACP
FlushFileBuffers
HeapAlloc
HeapFree
RaiseException
HeapReAlloc
VirtualAlloc
GetModuleHandleA
RtlUnwind
GetCommandLineA
GetProcessHeap
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
HeapDestroy
HeapCreate
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
user32
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CreateWindowExA
ShowWindow
UpdateWindow
SendMessageA
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
DefWindowProcA
DestroyWindow
DialogBoxParamA
BeginPaint
EndPaint
PostQuitMessage
EndDialog
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ