Static task
static1
Behavioral task
behavioral1
Sample
321b0dad36efb66b41d8f6528011b57f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
321b0dad36efb66b41d8f6528011b57f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
321b0dad36efb66b41d8f6528011b57f_JaffaCakes118
-
Size
253KB
-
MD5
321b0dad36efb66b41d8f6528011b57f
-
SHA1
386dc6405a5c7a0dbac134cab880f2a7cd95e099
-
SHA256
3dc2183677458c9d9edbef8c195e50e8a9b8939d3107247c66145fe940a35bd6
-
SHA512
f3d55577b91b2b5b21ce335e41959dc69d96b3247d5f8a5bf989dca76632f1b8c451d34026666729c5162adba15b35a0a1397766f6fdcc720c192d31397fcf0f
-
SSDEEP
6144:04KXklFag3Y2Khk3Mh3OPPsE5q6RNJtviryA5maScNQ:hKXT/h3Wrq6R4z5RSc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 321b0dad36efb66b41d8f6528011b57f_JaffaCakes118
Files
-
321b0dad36efb66b41d8f6528011b57f_JaffaCakes118.exe windows:4 windows x86 arch:x86
21843d927de129e26d2aceb9a7a87004
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadPriority
GetCurrentThread
GetCurrentThreadId
CloseHandle
VerLanguageNameA
lstrcatA
MoveFileA
CopyFileA
GetProcAddress
LoadLibraryA
GlobalAlloc
Sleep
SwitchToThread
SetStdHandle
ReadFile
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
FlushFileBuffers
SetFilePointer
GetLastError
SetEnvironmentVariableA
CompareStringW
CompareStringA
RaiseException
lstrlenA
LCMapStringW
LCMapStringA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
WideCharToMultiByte
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
IsBadWritePtr
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
user32
wsprintfA
SetRect
DrawCaption
GetDesktopWindow
DrawIcon
GetProcessWindowStation
EnumDesktopsA
PeekMessageW
PostMessageA
IsWindowEnabled
GetClientRect
gdi32
CreateHatchBrush
shell32
ExtractIconA
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ