Static task
static1
Behavioral task
behavioral1
Sample
33b6c459b27b8bc23cd43f32b2463568_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33b6c459b27b8bc23cd43f32b2463568_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33b6c459b27b8bc23cd43f32b2463568_JaffaCakes118
-
Size
76KB
-
MD5
33b6c459b27b8bc23cd43f32b2463568
-
SHA1
cdbd5609305f813c036863d4d40ce729dcb5d03f
-
SHA256
c11e6b4b73934ec0f3fe87f82a13bb930b1b0cc42fcd1839303b42b0a7a03336
-
SHA512
b0a2e1d3a6295be91a5fefef242a290438970e2ca547202278a055c62a19446b08b4ae4ad14e6118edab9ee257771fc2fd3484b638562c8524c0422fa5b4eaaa
-
SSDEEP
768:cIEzydyLDFQoP2ByoFQxpIY5iJhmw12QLp3jJvemmk88ynNsttlyJz+:tMVuouBfF2pIUiTfompzJvemmlnMlyJy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33b6c459b27b8bc23cd43f32b2463568_JaffaCakes118
Files
-
33b6c459b27b8bc23cd43f32b2463568_JaffaCakes118.exe windows:4 windows x86 arch:x86
530a3b5664cde568cdb96323b6eb989e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
VirtualFree
lstrcatA
lstrlenA
VirtualAlloc
CreateThread
LoadLibraryA
GetLastError
HeapCreate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
GetProcAddress
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ