Static task
static1
Behavioral task
behavioral1
Sample
301b14d2c81615b70a7eb01014d4576d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
301b14d2c81615b70a7eb01014d4576d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
301b14d2c81615b70a7eb01014d4576d_JaffaCakes118
-
Size
76KB
-
MD5
301b14d2c81615b70a7eb01014d4576d
-
SHA1
29603c0eb0f806fe0ae901c82026550518df6769
-
SHA256
92b955b3405b90eac17955425f12869dc586f47615e180a81da4298825d36ef1
-
SHA512
488b1f7dfa332ca568ceac9b8118d89b2a7339eb07c3693de62a73bf466adc4f57d7c4bd79ee1201ee32cf2e8da2671269ac1e9b4de4b399cfd3ca79852cbb74
-
SSDEEP
768:wjrqydP9yyotS8Cdwxe90ws3+j+OiLJQr6EDC8cclRsWI73nM8EeCvx9:wjWE9atS8209wsujViLJQNVlgnDpCZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 301b14d2c81615b70a7eb01014d4576d_JaffaCakes118
Files
-
301b14d2c81615b70a7eb01014d4576d_JaffaCakes118.exe windows:4 windows x86 arch:x86
0b9bc317c33e2a3839da07c430b8fea5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteExA
kernel32
TlsFree
MoveFileExA
DeleteFileA
Sleep
CloseHandle
WaitForSingleObject
GetTempPathA
GetModuleFileNameA
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
GetLastError
EnterCriticalSection
LeaveCriticalSection
WriteFile
HeapAlloc
ReadFile
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
SetLastError
TlsSetValue
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
RtlUnwind
InterlockedExchange
VirtualQuery
InitializeCriticalSection
CreateFileA
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
SetEndOfFile
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE