Static task
static1
Behavioral task
behavioral1
Sample
350aff83021cdd486dbc7f121e2b9017_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
350aff83021cdd486dbc7f121e2b9017_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
350aff83021cdd486dbc7f121e2b9017_JaffaCakes118
-
Size
544KB
-
MD5
350aff83021cdd486dbc7f121e2b9017
-
SHA1
97293de6173b032f01220a05cc7c12ffd5b10412
-
SHA256
420cc4c4aba9c021cb73ff9e403b8405a2a1b01c12016ce9529137c122baceaf
-
SHA512
0776544fa38346590534690554da1e615be5b46dc6022928c0db7e9ecd40c2743a0d8db6839bd83812613b4aa8894d7eff65b00a4a731e0332fa983b930d9f25
-
SSDEEP
12288:5bNXCYBLp68YuB/d2PGLrMpZSHrmie+aO8PAKSY:5bNMvuJbwpxPdS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 350aff83021cdd486dbc7f121e2b9017_JaffaCakes118
Files
-
350aff83021cdd486dbc7f121e2b9017_JaffaCakes118.exe windows:4 windows x86 arch:x86
50396a90247e510b1e7b6d627c77cc3d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
WriteConsoleW
LeaveCriticalSection
CreateFileA
GetFileType
Sleep
TlsGetValue
FindClose
VirtualFree
SetLastError
HeapCreate
InterlockedExchange
SetEnvironmentVariableA
GlobalLock
GetSystemDirectoryA
TerminateProcess
FindFirstFileA
WriteFile
ReadFile
SetFilePointer
TlsFree
WideCharToMultiByte
CompareStringA
RaiseException
GetModuleHandleA
GetProcessHeap
GetStringTypeA
InterlockedCompareExchange
GetProcAddress
MultiByteToWideChar
UnhandledExceptionFilter
GetCurrentDirectoryA
GetCommandLineW
LCMapStringW
GetLocaleInfoA
GetConsoleMode
GetWindowsDirectoryA
SizeofResource
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetACP
LoadLibraryA
GetEnvironmentStringsW
FlushFileBuffers
HeapDestroy
LCMapStringA
FreeLibrary
UnmapViewOfFile
GetConsoleOutputCP
GetStdHandle
HeapFree
GetLastError
VirtualAlloc
HeapAlloc
ExitProcess
GetCommandLineA
GetVersion
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
GetCurrentThreadId
TlsSetValue
TlsAlloc
GetEnvironmentVariableA
GetVersionExA
RtlUnwind
InterlockedDecrement
InitializeCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
HeapReAlloc
GetStringTypeW
user32
GetClientRect
LoadBitmapA
SendMessageA
ShowWindow
SetFocus
FillRect
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 484KB - Virtual size: 487KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ