Static task
static1
Behavioral task
behavioral1
Sample
3152ec4ee9616fdff7bfed5ccb904a05_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3152ec4ee9616fdff7bfed5ccb904a05_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3152ec4ee9616fdff7bfed5ccb904a05_JaffaCakes118
-
Size
160KB
-
MD5
3152ec4ee9616fdff7bfed5ccb904a05
-
SHA1
0d73cb8fa00a8857b7d36e40fccc5fb347f53f5f
-
SHA256
2d9ab295e884cd4bc81a96d5c94ddd0a415e591d66d0b982f66824867f975e64
-
SHA512
3315bec135adcfbb38c73c0169dd3f8448aeddebc5047ce6ec96ba57d320a84e24bd248c3be38e61f53aeb23a441ba5b47da9cf5a0408eff436e177b905b95d3
-
SSDEEP
3072:sC4eDykguFjtrTu5/04yABs2XalCo3iO:sC4eDykFjtfOM4RBs2Kl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3152ec4ee9616fdff7bfed5ccb904a05_JaffaCakes118
Files
-
3152ec4ee9616fdff7bfed5ccb904a05_JaffaCakes118.exe windows:4 windows x86 arch:x86
4051b9c8f9a49ae9edd6819852843b98
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
ExitProcess
GetLastError
CreateMutexA
GetDriveTypeA
FindNextFileA
GetModuleHandleA
DeleteFileA
GetSystemDirectoryA
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetModuleFileNameA
GetWindowsDirectoryA
CopyFileA
SetFileAttributesA
FindFirstFileA
WinExec
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
CreateFileA
RaiseException
IsBadWritePtr
IsBadReadPtr
HeapValidate
DebugBreak
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
SetStdHandle
SetEndOfFile
SetUnhandledExceptionFilter
HeapAlloc
HeapReAlloc
VirtualAlloc
SetConsoleCtrlHandler
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LCMapStringW
user32
SendMessageA
MessageBoxA
FindWindowA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegDeleteValueA
Sections
.text Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ