Static task
static1
Behavioral task
behavioral1
Sample
31c040203c32936b341ade7c44a4ec0a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31c040203c32936b341ade7c44a4ec0a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31c040203c32936b341ade7c44a4ec0a_JaffaCakes118
-
Size
56KB
-
MD5
31c040203c32936b341ade7c44a4ec0a
-
SHA1
8eb7c0070546a98658484b3ba42a5d435acaa631
-
SHA256
f8f256f0d50f8be234e7ea4ab2051f815772ea8edb5eb64bf0ae7a46ffe1789e
-
SHA512
09110c579f1f5dc22db366c315af85daefec65c39c429eee767753251ad92156e768b456122b48bceb9f6303e8f9a517e132e3e7a3bcfe17c49ef760760b6c4b
-
SSDEEP
384:2MntqU0AyvAYCxfRAxQbDtLK9cvtyN6iQcJzTP3SMN9vXR1B7BhQByB:jtqULyvO7cKt8zQcxTPl51
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31c040203c32936b341ade7c44a4ec0a_JaffaCakes118
Files
-
31c040203c32936b341ade7c44a4ec0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
708d31d475f6bd8e02a5ee5cddb6e0da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetSystemDirectoryA
GetWindowsDirectoryA
GetTempPathA
MapViewOfFile
CloseHandle
CreateFileMappingA
CreateFileA
GetModuleFileNameA
GetVersion
GetCurrentProcess
GetEnvironmentVariableA
GetStringTypeA
LCMapStringW
SetFilePointer
WriteFile
UnmapViewOfFile
LCMapStringA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
GetStringTypeW
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
shell32
ShellExecuteA
user32
wsprintfA
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ